Add CycloneDX SBOM and generation script

- Add sbom/sbom.cdx.json generated via Syft
- Add scripts/gen-sbom.sh for regenerating SBOM
- Add sbom/README.md with disclaimer
- Update .gitignore to track gen-sbom.sh
This commit is contained in:
unclecode
2026-01-27 01:45:42 +00:00
parent f6f7f1b551
commit 55de32d925
4 changed files with 31 additions and 0 deletions

13
sbom/README.md Normal file
View File

@@ -0,0 +1,13 @@
# Software Bill of Materials (SBOM)
This directory contains the CycloneDX SBOM for the project.
## Disclaimer
This SBOM is generated on a best-effort basis from project metadata and reflects dependencies at the time of generation. It is not a guarantee of completeness or accuracy.
## Regenerating
```bash
./scripts/gen-sbom.sh
```