update

pipelines/compliance.yml

@@ -35,6 +35,10 @@ sonarqube:
 generate_sbom:
   extends: .generate_sbom
   stage: validate
+  needs:
+    - job: docker-build
+      optional: true
+      artifacts: true
   rules:
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH || $CI_COMMIT_BRANCH =~ '/^release/' || $CI_MERGE_REQUEST_IID
 

scripts/scanner/grype.sh

@@ -5,5 +5,5 @@
 for i in syft/*.sbom.json;
 do filename=${i%*.sbom.json};
   filename=${filename##/};
-  grype syft/$i -o json --file syft/$filename.cve.json;
+  grype $i -o json --file $filename.cve.json;
 done