Skip to content

ci: add SBOM export workflow#67

Merged
dkutzmarks-rgb merged 1 commit intomainfrom
hotfix/add-sbom-export
Mar 13, 2026
Merged

ci: add SBOM export workflow#67
dkutzmarks-rgb merged 1 commit intomainfrom
hotfix/add-sbom-export

Conversation

@dkutzmarks-rgb
Copy link
Contributor

Summary

  • Adds CycloneDX SBOM generation via cdxgen and uploads to Dependency Track
  • Runs on push to the default branch and weekly (randomized schedule)

Details

  • SBOM format: CycloneDX 1.6 (required by Dependency Track)
  • Generator: cdxgen v12.1.1 (Docker image)
  • Runner: ubuntu-latest
  • Skips SBOM generation if no commits in the last 7 days

@dkutzmarks-rgb dkutzmarks-rgb merged commit e97162d into main Mar 13, 2026
9 checks passed
@dkutzmarks-rgb dkutzmarks-rgb deleted the hotfix/add-sbom-export branch March 13, 2026 21:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant