add SBOM generation to CI, document in governance

2026-08-16 16:37:27 +02:00 · 2026-06-13 19:36:12 +02:00
parent 8de34fc4a9
commit fbfc2eb626
2 changed files with 8 additions and 0 deletions
@@ -68,6 +68,10 @@ jobs:
          tar -czf builds/notalterra-${GITHUB_REF_NAME}-linux-amd64.tar.gz notalterra
          cp target/x86_64-pc-windows-gnu/release/notalterra.exe NotAlterra.exe
          zip -q builds/notalterra-${GITHUB_REF_NAME}-windows-x64.zip NotAlterra.exe
+      - name: Generate SBOM
+        run: |
+          cargo cyclonedx --all --output-dir builds
+          mv builds/notalterra-*.cdx.json builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json 2>/dev/null || true
      - name: Generate hashes
        id: hash
        run: |