From a801b62e6fe514adcce2770960a2a61f728c31d4 Mon Sep 17 00:00:00 2001
From: ejahnGithub <ejahngithub@github.com>
Date: Thu, 22 Feb 2024 08:14:04 -0800
Subject: [PATCH] fixed ci

---
 .github/workflows/ci.yml |  2 +-
 __tests__/data/sbom.json | 41 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+), 1 deletion(-)
 create mode 100644 __tests__/data/sbom.json

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4c51313..3e9ebdd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -63,7 +63,7 @@ jobs:
         uses: ./
         with:
           subject-path: ${{ github.workspace }}/README.md
-          predicate-path: ${{ github.workspace }}/testing/sbom.json
+          predicate-path: ${{ github.workspace }}/__tests__/data/sbom.json
           predicate-type: 'https://spdx.dev/Document/v2.3'
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Dump output
diff --git a/__tests__/data/sbom.json b/__tests__/data/sbom.json
new file mode 100644
index 0000000..b99e92e
--- /dev/null
+++ b/__tests__/data/sbom.json
@@ -0,0 +1,41 @@
+{
+    "spdxVersion": "SPDX-2.3",
+    "dataLicense": "CC0-1.0",
+    "SPDXID": "SPDXRef-DOCUMENT",
+    "name": "./",
+    "documentNamespace": "https://anchore.com/syft/dir/80b363b6-87f4-4162-853f-60d402537d20",
+    "creationInfo": {
+      "licenseListVersion": "3.22",
+      "creators": [
+        "Organization: Anchore, Inc",
+        "Tool: syft-0.103.1"
+      ],
+      "created": "2024-01-31T18:22:50Z"
+    },
+    "packages": [
+      {
+        "name": "@ampproject/remapping",
+        "SPDXID": "SPDXRef-Package-npm--ampproject-remapping-5266573ba4f24a42",
+        "versionInfo": "2.2.1",
+        "supplier": "NOASSERTION",
+        "downloadLocation": "NOASSERTION",
+        "filesAnalyzed": false,
+        "sourceInfo": "acquired package info from installed node module manifest file: /yarn.lock",
+        "licenseConcluded": "NOASSERTION",
+        "licenseDeclared": "Apache-2.0",
+        "copyrightText": "NOASSERTION",
+        "externalRefs": [
+          {
+            "referenceCategory": "SECURITY",
+            "referenceType": "cpe23Type",
+            "referenceLocator": "cpe:2.3:a:\\@ampproject\\/remapping:\\@ampproject\\/remapping:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "referenceCategory": "PACKAGE-MANAGER",
+            "referenceType": "purl",
+            "referenceLocator": "pkg:npm/%40ampproject/remapping@2.2.1"
+          }
+        ]
+      }
+    ]
+}
\ No newline at end of file