sbom-generate-submit.yml

name: SBOM Generate and Submit

on:
  push:
    branches: [ "main", "release", "development", "nam20485" ]
  workflow_dispatch:

permissions:
    contents: read

jobs:
  build:
    name: Generate-Submit-SBOM
    runs-on: ubuntu-22.04
    permissions: 
        id-token: write
        contents: write

    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
        with:
          egress-policy: audit

      - name: Checkout Code
        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3

      - name: SBOM Generate
        uses: advanced-security/sbom-generator-action@375dee8e6144d9fd0ec1f5667b4f6fb4faacefed # v0.0.1
        id: sbom-generate
        env: 
          GITHUB_TOKEN: ${{ github.token }}

      - name: SBOM Upload 
        uses: advanced-security/spdx-dependency-submission-action@dc069b56ba31ce546dc419b549aceb808c632d9a # v0.0.1
        with:
            filePath: ${{ steps.sbom-generate.outputs.fileName }}