GitHub API rate limit about cyclonedx-gomod HOT 2 CLOSED

Hi @manuel-scharf-snkeos, cyclonedx-gomod does not interact with the GitHub API directly, so I'm a little at loss as to how it could even contribute to your rate limit being exceeded. cyclonedx-dotnet uses GitHub for license identification, but cyclonedx-gomod does it all locally.

The GitHub Action you use to download cyclonedx-gomod interacts with the GitHub API in order to perform the download.

Have you tried this?

 name: Generate SBOM
  uses: CycloneDX/gh-gomod-generate-sbom@v1
  env:
    GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  with:
    version: v1.3.0

from cyclonedx-gomod.

It turned out that the rate limit was reached when getting CycloneDX/gh-gomod-generate-sbom, not when executing it.
Passing the GITHUB_TOKEN as mentioned by @nscuro fixes the rate limit issue.

from cyclonedx-gomod.