Skip to content

Commit 4f3400b

Browse files
authored
Use full-report convenience action for SSDLC reports (#1589)
1 parent 11d2298 commit 4f3400b

File tree

1 file changed

+3
-19
lines changed

1 file changed

+3
-19
lines changed

.github/workflows/release.yml

Lines changed: 3 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -219,33 +219,17 @@ jobs:
219219
- name: Download all release artifacts
220220
run: gh release download ${{ inputs.version }} --dir ${{ env.RELEASE_ASSETS }}
221221

222-
- name: "Generate authorized publication document"
223-
uses: mongodb-labs/drivers-github-tools/authorized-pub@v2
222+
- name: "Generate SSDLC Reports"
223+
uses: mongodb-labs/drivers-github-tools/full-report@v2
224224
with:
225225
product_name: "MongoDB PHP Driver (extension)"
226226
release_version: ${{ inputs.version }}
227-
filenames: "${{ env.RELEASE_ASSETS }}/*"
228-
token: ${{ env.GH_TOKEN }}
229-
230-
- name: "Download SBOM file from Silk"
231-
uses: mongodb-labs/drivers-github-tools/sbom@v2
232-
with:
227+
dist_filenames: "${{ env.RELEASE_ASSETS }}/*"
233228
silk_asset_group: mongodb-php-driver-extension
234229

235230
- name: "Upload SBOM as release artifact"
236231
run: gh release upload ${{ inputs.version }} ${{ env.S3_ASSETS }}/cyclonedx.sbom.json
237232

238-
- name: "Generate SARIF report from code scanning alerts"
239-
uses: mongodb-labs/drivers-github-tools/code-scanning-export@v2
240-
with:
241-
ref: ${{ inputs.version }}
242-
output-file: ${{ env.S3_ASSETS }}/code-scanning-alerts.json
243-
244-
- name: "Generate compliance report"
245-
uses: mongodb-labs/drivers-github-tools/compliance-report@v2
246-
with:
247-
token: ${{ env.GH_TOKEN }}
248-
249233
- name: Upload S3 assets
250234
uses: mongodb-labs/drivers-github-tools/upload-s3-assets@v2
251235
with:

0 commit comments

Comments
 (0)