From a691e8be1a156e7649caa5a382bc1e554e94cda0 Mon Sep 17 00:00:00 2001
From: Sven Tennie <sven.tennie@wire.com>
Date: Wed, 5 Feb 2025 10:45:46 +0100
Subject: [PATCH] Correctly refer to the flake

---
 .github/workflows/ci.yml | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 627013c..5b84c1a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -95,14 +95,16 @@ jobs:
       - name: Build BOM dependencies
         run: nix build .\#bomDependencies
 
+        # TODO: Use main branch once the feature branch is merged to refer to the flake
       - name: Build BOM file
-        run: nix run .\#create-sbom -- --root-package-name "ldap-scim-bridge"
+        run: nix run 'github:wireapp/tom-bombadil/sventennie/import-bombon#create-sbom' -- --root-package-name "ldap-scim-bridge"
 
       - name: Push BOM file
-        run: nix run .\#upload-bom -- --project-name "ldap-scim-bridge" \
-              --project-version "$TAG" \
-              --auto-create \
-              --bom-file ./sbom.json
+        run:
+          nix run 'github:wireapp/tom-bombadil/sventennie/import-bombon#upload-bom' -- --project-name "ldap-scim-bridge" \
+          --project-version "$TAG" \
+          --auto-create \
+          --bom-file ./sbom.json
         env:
           TAG: ${{ steps.vars.outputs.tag }}
           DEPENDENCY_TRACK_API_KEY: ${{ secrets.DEPENDENCY_TRACK_API_KEY }}