Add sbom github actions

.github/workflows/build-on-push.yaml

@@ -18,4 +18,10 @@ jobs:
     uses: ./.github/workflows/reusable-build.yaml
     secrets:
       PUZZLE_REGISTRY_USERNAME: ${{ secrets.PUZZLE_REGISTRY_USERNAME }}
-      PUZZLE_REGISTRY_TOKEN: ${{ secrets.PUZZLE_REGISTRY_TOKEN }}
+      PUZZLE_REGISTRY_TOKEN: ${{ secrets.PUZZLE_REGISTRY_TOKEN }}
+  bom:
+    needs: build
+    uses: ./.github/workflows/reusable-boms.yaml
+    secrets:
+      PUZZLE_DEP_TRACK_URL: ${{ secrets.PUZZLE_DEP_TRACK_URL}}
+      PUZZLE_DEP_TRACK_TOKEN: ${{ secrets.PUZZLE_DEP_TRACK_TOKEN }}

.github/workflows/manual-build.yaml

@@ -9,4 +9,4 @@ jobs:
     uses: ./.github/workflows/reusable-build.yaml
     secrets:
       username: ${{ secrets.PUZZLE_REGISTRY_USERNAME }}
-      password: ${{ secrets.PUZZLE_REGISTRY_TOKEN }}
+      password: ${{ secrets.PUZZLE_REGISTRY_TOKEN }}

.github/workflows/reusable-boms.yaml

@@ -0,0 +1,28 @@
+
+name: 'Reusable: Build BOM for dependency tracker'
+
+on:
+  workflow_call:
+    secrets:
+      PUZZLE_DEP_TRACK_URL:
+        description: 'Needed for the dep track push'
+        required: false
+      PUZZLE_DEP_TRACK_TOKEN:
+        description: 'Needed for the dep track push'
+        required: false
+
+jobs:
+  build:
+    environment: deploy
+    runs-on: 'ubuntu-latest'
+    steps:
+      - name: generate-bom
+        run: |-
+          npm install -g @appthreat/cdxgen && \
+          mkdir ./reports && \
+          cdxgen -o ./reports/bom.xml -r ./ && \
+          cdxgen --server-url ${{ secrets.PUZZLE_DEP_TRACK_URL }} \
+                 --api-key ${{ secrets.PUZZLE_DEP_TRACK_TOKEN }} \
+                 --project-name $GITHUB_REPOSITORY \
+                 --project-version $GITHUB_REF \
+                 --recurse ./