fix: ensure sbom is copied to output-file (#411)

Signed-off-by: Guilherme Salazar <[email protected]>
anchore · Apr 12, 2023 · 8e2e937 · 8e2e937
1 parent 800a56f
commit 8e2e937
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 18 deletions.
diff --git a/dist/attachReleaseAssets/index.js b/dist/attachReleaseAssets/index.js
diff --git a/dist/downloadSyft/index.js b/dist/downloadSyft/index.js
diff --git a/dist/runSyftAction/index.js b/dist/runSyftAction/index.js
diff --git a/src/github/SyftGithubAction.ts b/src/github/SyftGithubAction.ts
@@ -14,9 +14,9 @@ import { SyftOptions } from "../Syft";
 import { VERSION } from "../SyftVersion";
 import { execute } from "./Executor";
 import {
+  DependencySnapshot,
   dashWrap,
   debugLog,
-  DependencySnapshot,
   getClient,
 } from "./GithubClient";
 import { downloadSyftFromZip } from "./SyftDownloader";
@@ -282,11 +282,6 @@ export async function uploadSbomArtifact(contents: string): Promise<void> {
 
   const retentionDays = parseInt(core.getInput("upload-artifact-retention"));
 
-  const outputFile = core.getInput("output-file");
-  if (outputFile) {
-    fs.copyFileSync(filePath, outputFile);
-  }
-
   core.info(dashWrap("Uploading workflow artifacts"));
   core.info(filePath);
 
@@ -384,6 +379,11 @@ export async function runSyftAction(): Promise<void> {
       core.debug(`Prior artifact: ${priorArtifact}`);
     }
 
+    const outputFile = core.getInput("output-file");
+    if (outputFile) {
+      fs.writeFileSync(outputFile, output);
+    }
+
     if (doUpload) {
       await uploadSbomArtifact(output);