SBOM

.github/workflows/sbom.yml

@@ -0,0 +1,20 @@
+name: Build nodejs project
+on: push
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    name: Install and build
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js v20.17.0
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20.17.0
+
+      - run: npm install
+
+      - name: Create SBOM with CycloneDX
+        uses: CycloneDX/gh-node-module-generatebom@v1
+        with: 
+          output: './workbench.app.bom.xml'