diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index f57bdcc..51e1fd3 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -83,7 +83,7 @@ on: type: boolean default: false language: - description: 'Primary programming language of the project, used for SBOM enrichment (e.g., "ruby", "go", "python")' + description: 'Primary programming language of the project, used for SBOM enrichment (e.g., "ruby", "go", "python", "erlang", "ruby-erlang")' required: false type: string default: 'ruby' @@ -234,7 +234,7 @@ jobs: uses: actions/checkout@v6 - name: Set up Ruby and run bundle install - if: inputs.language == 'ruby' + if: inputs.language == 'ruby' || inputs.language == 'ruby-erlang' uses: ruby/setup-ruby@v1 with: ruby-version: '3.4.2' @@ -242,7 +242,7 @@ jobs: working-directory: ${{ inputs.ruby-app-directory != '' && inputs.ruby-app-directory || '.' }} - name: Configure Bundler for private Ruby gems - if: ${{ inputs.run-bundle-install == true && inputs.language == 'ruby' }} + if: ${{ inputs.run-bundle-install == true && (inputs.language == 'ruby' || inputs.language == 'ruby-erlang') }} run: | if [ -z "${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}" ]; then echo "Skipping: PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE secret not configured or not in scope" @@ -251,7 +251,7 @@ jobs: bundle config set --local github.com "x-access-token:${{ secrets.PRIVATE_ACCESS_KITCHEN_CHEF_ENTERPRISE }}" - name: Set up Erlang/OTP and rebar3 - if: inputs.language == 'erlang' + if: inputs.language == 'erlang' || inputs.language == 'ruby-erlang' uses: erlef/setup-beam@v1 with: otp-version: '25.3.2.16' @@ -264,7 +264,7 @@ jobs: run: git config --global url."https://${{ secrets.GH_TOKEN }}@github.com/".insteadOf "https://github.com/" - name: generate Gemfile.lock if needed for Ruby projects - if: ${{ inputs.run-bundle-install == true && inputs.language == 'ruby' }} + if: ${{ inputs.run-bundle-install == true && (inputs.language == 'ruby' || inputs.language == 'ruby-erlang') }} continue-on-error: true working-directory: ${{ inputs.ruby-app-directory != '' && inputs.ruby-app-directory || '.' }} run: | @@ -273,7 +273,7 @@ jobs: fi - name: attach artifact for Gemfile.lock for debugging - if: ${{ inputs.language == 'ruby' }} + if: ${{ inputs.language == 'ruby' || inputs.language == 'ruby-erlang' }} uses: actions/upload-artifact@v4 continue-on-error: true with: @@ -339,7 +339,7 @@ jobs: # Persists a baseline to the BlackDuck server so PR scans can diff against it. - name: BlackDuck SCA Full Scan id: blackduck-full-scan - if: ${{ inputs.github-event-name != 'pull_request' }} + if: ${{ inputs.github-event-name != 'pull_request' }} || ${{ inputs.github-event-name == 'workflow_dispatch' }} uses: blackduck-inc/black-duck-security-scan@v2.1.1 continue-on-error: false env: