CHANGELOG.md

+## [4.3.2](https://gitlab.com/to-be-continuous/angular/compare/4.3.1...4.3.2) (2023-03-28)
+
+
+### Bug Fixes
+
+* **sbom:** add CycloneDX report ([25ee763](https://gitlab.com/to-be-continuous/angular/commit/25ee763452c26587c280f42db376db5a183d0f52))
+
 ## [4.3.1](https://gitlab.com/to-be-continuous/angular/compare/4.3.0...4.3.1) (2023-03-26)
 
 

README.md

@@ -9,7 +9,7 @@ In order to include this template in your project, add the following to your `gi
 ```yaml
 include:
   - project: 'to-be-continuous/angular'
-    ref: '4.3.1'
+    ref: '4.3.2'
     file: '/templates/gitlab-ci-angular.yml'
 ```
 

templates/gitlab-ci-angular.yml

@@ -428,7 +428,7 @@ stages:
   image: $NG_CLI_IMAGE
   services:
     - name: "$TBC_TRACKING_IMAGE"
-      command: ["--service", "angular", "4.3.1"]
+      command: ["--service", "angular", "4.3.2"]
   # cache configuration
   cache:
     key: "$CI_COMMIT_REF_SLUG-angular"
@@ -544,17 +544,20 @@ ng-sbom:
     - mkdir -p -m 777 reports
     - npx -y @cyclonedx/cyclonedx-npm${NG_SBOM_VERSION:+@$NG_SBOM_VERSION} --output-format JSON --output-file reports/ng-sbom.cyclonedx.json $NG_SBOM_OPTS
     - chmod a+r reports/ng-sbom.cyclonedx.json
-  rules:
-    # exclude if disabled
-    - if: '$NG_SBOM_DISABLED == "true"'
-      when: never
-    - !reference [.test-policy, rules]
   artifacts:
     name: "SBOM for Angular from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"
     when: always
     expire_in: 1 week
     paths:
       - $NG_WORKSPACE_DIR/reports/ng-sbom.cyclonedx.json
+    reports:
+      cyclonedx: 
+        - $NG_WORKSPACE_DIR/reports/ng-sbom.cyclonedx.json
+  rules:
+    # exclude if disabled
+    - if: '$NG_SBOM_DISABLED == "true"'
+      when: never
+    - !reference [.test-policy, rules]
 
 ###############################################################################################
 #                                      publish stage:                                         #