@@ -66,15 +66,15 @@ jobs:
6666 # with:
6767 # python-version: "3.10"
6868
69- - name : Install uv
69+ - name : Install uv (push only)
7070 if : env.PR_SCAN == false
7171 uses : astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 # v7.1.4
7272 with :
7373 python-version : " 3.10"
7474 activate-environment : true
7575 enable-cache : true
7676
77- - name : Stash existing SBOM, generate new SBOM
77+ - name : Stash existing SBOM, generate new SBOM (push only)
7878 if : env.PR_SCAN == false
7979 run : |
8080 # Existing SBOM: Strip out nondeterministic SBOM fields and save to temp file
8484 # Generated SBOM: Strip out nondeterministic SBOM fields and save to temp file
8585 jq 'del(.version, .metadata.timestamp, .metadata.tools.services[].version)' sbom.json > ${{runner.temp}}/sbom.generated.cdx.json
8686
87- - name : Check for SBOM changes
87+ - name : Check for SBOM changes (push only)
8888 if : env.PR_SCAN == false
8989 id : sbom_diff
9090 run : |
@@ -93,13 +93,13 @@ jobs:
9393 # Set the output variable
9494 echo "result=$RESULT" | tee -a $GITHUB_OUTPUT
9595
96- - name : Generate pull request content and notice message, if SBOM has changed
96+ - name : Generate pull request content and notice message, if SBOM has changed (push only)
9797 if : env.PR_SCAN == false && steps.sbom_diff.outputs.result
9898 run : |
9999 printf "SBOM updated after commit ${{ github.sha }}.\n\n" | cat - ${{runner.temp}}/warnings.txt > ${{runner.temp}}/pr_body.txt
100100 echo "::notice title=SBOM-Diff::SBOM has changed"
101101
102- - name : Open Pull Request, if SBOM has changed
102+ - name : Open Pull Request, if SBOM has changed (push only)
103103 if : env.PR_SCAN == false && steps.sbom_diff.outputs.result
104104 uses : peter-evans/create-pull-request@84ae59a2cdc2258d6fa0732dd66352dddae2a412 # v7.0.9
105105 env :
0 commit comments