SBOM attempt 6

SBOM attempt 7

Author: daniel-noland

.github/workflows/build.yml

@@ -11,8 +11,9 @@ on:
     branches:
       - "main"
 
-concurrency:
-  group: "${{ github.workflow }}"
+#concurrency:
+#  group: "${{ github.workflow }}"
+#  cancel-in-progress: true
 
 jobs:
   matrix:
@@ -95,13 +96,18 @@ jobs:
 
   run:
     name: "run"
-    needs: "matrix"
+    needs:
+      - matrix
     runs-on:
       - "lab"
     timeout-minutes: 300
     strategy:
       max-parallel: 3
       matrix: ${{ fromJSON(needs.matrix.outputs.matrix) }}
+    permissions:
+      packages: "write"
+      contents: "write"
+      id-token: "write"
     steps:
       - uses: "actions/checkout@v4"
       - name: "install nix"
@@ -135,6 +141,11 @@ jobs:
       - name: "Generate SBOM"
         run: |
           ./scripts/sbom.sh
+      - name: "SBOM upload"
+        # if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+        uses: "advanced-security/[email protected]"
+        with:
+          filePattern: '/tmp/dpdk-sys/builds/*.spdx.json'
       - name: "step summary"
         continue-on-error: true # might fail due to $GITHUB_STEP_SUMMARY size limit of 1MB
         run: |