Skip to content

Conversation

@dlicheva
Copy link
Contributor

Copy link
Contributor

@jmorgadosoares jmorgadosoares left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a simple way to make the component list alphabetical? There are many components now, it's quite confusing it not being in order 😅


```yaml
# file: ./my-workflow/workflow.yaml
description: Nancy based workflow
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is Nancy based workflow correct?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no 😬

description: Nancy based workflow
name: mobsfscan
components:
- component: ghcr.io/smithy-security/smithy/images/components/targets/git-clone:v1.3.4
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is the git-clone correct here?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch - updated it

source-code-artifact:
- name: "artifact_url"
type: "string"
value: "https://github.com/prateek147/DVIA-v2/releases/download/v2.0/DVIA-v2-swift.ipa"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: source-code-artifact documentation says that only .zip, .tar, and .tar.gz formats are accepted but .ipa and .apk are also valid. I will add those 2 to the docs

Copy link
Contributor

@jmorgadosoares jmorgadosoares left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dlicheva dlicheva merged commit 24cc1b7 into main Sep 16, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants