Scan requirements-dev.txt

artefactual · Apr 13, 2024 · e2f5891 · e2f5891
1 parent 95f8e39
commit e2f5891
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/generate-sbom.yml b/.github/workflows/generate-sbom.yml
@@ -26,7 +26,7 @@ jobs:
             ${{ runner.os }}-trivy-
 
       - name: Generate SBOM
-        run: trivy fs --format cyclonedx --include-dev-deps --output sbom.xml .
+        run: trivy fs --format cyclonedx --file-patterns "pip:requirements*.txt" --include-dev-deps --output sbom.xml .
         env:
           TRIVY_NO_PROGRESS: "true"