github sbom

.github/workflows/sbom.yml

@@ -1,16 +1,11 @@
 name: SBOM
 on:
-  push:
-    branches:
-      - main
-  pull_request:
-  merge_group:
   workflow_dispatch:
+
+permissions: read-all
 
 jobs:
-  node-tests:
-    strategy:
-      fail-fast: false
+  sbom:
     runs-on: ubuntu-latest
     env:
       NPM_CONFIG_UNSAFE_PERM: true
@@ -27,7 +22,12 @@ jobs:
       - name: Bootstrap
         run: npm ci
 
-      - name: Build 🔧
-        run: npm run compile
+      - uses: advanced-security/sbom-generator-action@v0.0.1
+        id: sbom
+        env: 
+          GITHUB_TOKEN: ${{ github.token }}
 
-      - uses: anchore/sbom-action@v0
+      - uses: actions/upload-artifact@v3.1.0
+        with: 
+          path: ${{steps.sbom.outputs.fileName }}
+          name: "SBOM"