Summary
Currently, in the dependency:sbom, we generate a file called bom.spdx.json. This is uploaded with the GitHub release in the .github/workflows/build-and-publish.yml. We would like for the uploaded file to be named like <project_name>_<version>.spdx.json, e.g. exasol_toolbox-10.4.0.spdx.json.
Summary
Currently, in the
dependency:sbom, we generate a file calledbom.spdx.json. This is uploaded with the GitHub release in the.github/workflows/build-and-publish.yml. We would like for the uploaded file to be named like<project_name>_<version>.spdx.json, e.g.exasol_toolbox-10.4.0.spdx.json.