Add validate-sbom action

common/src/path-utils.test.ts

@@ -1,4 +1,4 @@
-import { filterPaths } from "./path-utils";
+import { filterPaths, splitPaths } from "./path-utils";
 
 describe('path utils', () => {
 
@@ -89,4 +89,31 @@ describe('path utils', () => {
             expect(filterPaths(paths, patterns)).toEqual(expected);
         });
     });
+
+    describe('splitPaths', () => {
+        test.each([
+            {
+                paths: '',
+                expected: []
+            },
+            {
+                paths: 'a.cdx.json',
+                expected: ['a.cdx.json']
+            },
+            {
+                paths: 'a.cdx.json,b.cdx.json',
+                expected: ['a.cdx.json', 'b.cdx.json']
+            },
+            {
+                paths: 'a.cdx.json;b.cdx.json',
+                expected: ['a.cdx.json', 'b.cdx.json']
+            },
+            {
+                paths: 'a.cdx.json\r\nb.cdx.json\n c.cdx.json ',
+                expected: ['a.cdx.json', 'b.cdx.json', 'c.cdx.json']
+            },
+        ])('basic cases [%#]', ({ paths, expected }) => {
+            expect(splitPaths(paths)).toEqual(expected);
+        });
+    });
 });

common/src/path-utils.ts

@@ -32,3 +32,10 @@ function filterPathsImpl(
         }, false);
     });
 }
+
+export function splitPaths(paths: string): string[] {
+    return paths
+        .split(/[\r\n,;]+/)
+        .map(path => path.trim())
+        .filter(path => path.length > 0);
+}

get-changed-files/dist/index.js

@@ -124,6 +124,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.filterPaths = filterPaths;
+exports.splitPaths = splitPaths;
 const core = __importStar(__nccwpck_require__(1751));
 const minimatch_1 = __nccwpck_require__(4804);
 const NEGATION = '!';
@@ -148,6 +149,12 @@ function filterPathsImpl(paths, patterns) {
         }, false);
     });
 }
+function splitPaths(paths) {
+    return paths
+        .split(/[\r\n,;]+/)
+        .map(path => path.trim())
+        .filter(path => path.length > 0);
+}
 
 
 /***/ }),

pnpm-workspace.yaml

@@ -3,6 +3,7 @@ packages:
   - get-changed-files
   - pr-filter
   - send-teams-notification
+  - validate-sbom
   - verify-version-change
 
 catalog:

pr-filter/dist/index.js

@@ -124,6 +124,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.filterPaths = filterPaths;
+exports.splitPaths = splitPaths;
 const core = __importStar(__nccwpck_require__(1751));
 const minimatch_1 = __nccwpck_require__(4804);
 const NEGATION = '!';
@@ -148,6 +149,12 @@ function filterPathsImpl(paths, patterns) {
         }, false);
     });
 }
+function splitPaths(paths) {
+    return paths
+        .split(/[\r\n,;]+/)
+        .map(path => path.trim())
+        .filter(path => path.length > 0);
+}
 
 
 /***/ }),

validate-sbom/action.yml

@@ -0,0 +1,18 @@
+name: validate-sbom
+description: Install CycloneDX CLI and validate SBOM file(s)
+
+inputs:
+  input-format:
+    description: SBOM file format
+    required: false
+    default: json
+  input-file:
+    description: Path to SBOM file to validate
+    required: false
+  input-files:
+    description: Newline, comma, or semicolon separated paths to SBOM files to validate
+    required: false
+
+runs:
+  using: node24
+  main: dist/index.js