check sbom

Author: bennsimon

.github/workflows/scancode.yaml

@@ -0,0 +1,19 @@
+# This workflow will build and test a golang project
+# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go
+
+name: comp check
+
+on:
+  push:
+
+jobs:
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: aboutcode-org/scancode-action@beta
+        pipelines: "scan_codebase"
+        output-formats: "json xlsx spdx cyclonedx"
+        check-compliance: true