sbom-generate-submit.yml

name: SBOM Generate and Submit

on:
  push:
    branches: [ "main", "release", "development", "nam20485" ]
  workflow_dispatch:

permissions:
    contents: read

jobs:
  build:
    name: Generate-Submit-SBOM
    runs-on: ubuntu-22.04
    permissions: 
        id-token: write
        contents: write

    steps:
      - name: Checkout Code
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

      - name: SBOM Generate
        uses: advanced-security/sbom-generator-action@v0.0.1
        id: sbom-generate
        env: 
          GITHUB_TOKEN: ${{ github.token }}

      - name: SBOM Upload 
        uses: advanced-security/spdx-dependency-submission-action@v0.0.1
        with:
            filePath: ${{ steps.sbom-generate.outputs.fileName }}