diff --git a/tasks/scanvulnerability.yaml b/tasks/scanvulnerability.yaml index 7b98a1ff..86ce591b 100644 --- a/tasks/scanvulnerability.yaml +++ b/tasks/scanvulnerability.yaml @@ -1,13 +1,13 @@ +--- tasks: - name: grype-scan-sbom description: Create a UDS package with configurable flavor and extract the SBOM from all created packages and analyze for vulnerabilities actions: - cmd: | uds zarf package create . --flavor=upstream --confirm --no-progress -o sbom - for file in sbom/*.zst; do - uds zarf package inspect "$file" --sbom-out ./sbom --no-progress; + for file in sbom/*.zst; do + uds zarf package inspect "$file" --sbom-out ./sbom --no-progress; done - if ! command -v grype &> /dev/null; then echo "Grype could not be found, installing..." curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin @@ -20,5 +20,4 @@ tasks: echo "Output saved to ./sarif/${base}.sarif" done ' sh {} + - echo "All SBOM files processed and analyzed for vulnerabilities."