From ec254a29add223f0d3d3925d0f3512c7fb441aaf Mon Sep 17 00:00:00 2001 From: nikhil2611 Date: Mon, 26 Oct 2026 15:46:17 +0530 Subject: [PATCH 1/2] Use ruby 3.4 (latest patch) in sbom workflow ruby 3.4.2 is unavailable on ubuntu-26.04 runners, breaking the Black Duck SCA scan. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: nikhil2611 --- .github/workflows/sbom.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 18c4be37..05c0af28 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -237,7 +237,7 @@ jobs: if: inputs.language == 'ruby' || inputs.language == 'ruby-erlang' uses: ruby/setup-ruby@v1 with: - ruby-version: '3.4.2' + ruby-version: '3.4' bundler-cache: false working-directory: ${{ inputs.ruby-app-directory != '' && inputs.ruby-app-directory || '.' }} From b1e3fd41e58a7d105cd8e0a8fe897cc1d6847d08 Mon Sep 17 00:00:00 2001 From: nikhil2611 Date: Mon, 26 Oct 2026 15:51:33 +0530 Subject: [PATCH 2/2] Temporarily point sbom job at fix branch for testing Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Signed-off-by: nikhil2611 --- .github/workflows/ci-main-pull-request.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-main-pull-request.yml b/.github/workflows/ci-main-pull-request.yml index fb67e52e..f81c9615 100644 --- a/.github/workflows/ci-main-pull-request.yml +++ b/.github/workflows/ci-main-pull-request.yml @@ -1630,7 +1630,7 @@ jobs: name: 'Generating SBOM' # Create software bill-of-materials (SBOM) using SPDX format if: ${{ inputs.generate-sbom == true }} - uses: chef/common-github-actions/.github/workflows/sbom.yml@main + uses: chef/common-github-actions/.github/workflows/sbom.yml@fix/sbom-ruby-version-3.4 needs: checkout # TODO: fix set-application-version secrets: inherit with: