ci: add SBOM export workflow#148

Open

dkutzmarks-rgb wants to merge 1 commit intomasterfrom

hotfix/add-sbom-export

dkutzmarks-rgb commented Mar 3, 2026

Summary

Adds CycloneDX SBOM generation via cdxgen and uploads to Dependency Track
Runs on push to the default branch and weekly (randomized schedule)

Details

SBOM format: CycloneDX 1.6 (required by Dependency Track)
Generator: cdxgen v12.1.1 (Docker image)
Runner: ubuntu-latest
Skips SBOM generation if no commits in the last 7 days


          ci: add SBOM export workflow

c761507

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet