msft-sbom-tool.yml

name: Microsoft SBOM Tool demo

on:
  workflow_dispatch:
  push:
    branches: ["main"]

jobs:
  build:
    name: Create SBOM of .NET solution
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v4
    - name: Setup .NET
      uses: actions/setup-dotnet@v4
      with:
        dotnet-version: 8.0.x
    - name: Build
      run: dotnet build src/ReactAndAspNetCoreApp.sln --output buildOutput      
    - name: Generate SBOM
      run: |
        curl -Lo $RUNNER_TEMP/sbom-tool https://github.com/microsoft/sbom-tool/releases/latest/download/sbom-tool-linux-x64
        chmod +x $RUNNER_TEMP/sbom-tool
        $RUNNER_TEMP/sbom-tool generate -b ./buildOutput -bc src/ -pn Test -pv 0.0.1 -ps Arbitrary -nsb https://sbom.arbitrary.com -V Verbose
    - name: Upload a Build Artifact
      uses: actions/upload-artifact@v4
      with:
        path: buildOutput