Add ability to generate SBOM for AtoM #3

	name: Generate and upload SBOM

	on:
	push:
	branches:
	- qa/**
	- stable/**
	- dev/produce-sbom

	jobs:
	generate-sbom:
	runs-on: ubuntu-latest
	container:
	image: aquasec/trivy:latest
	options: --entrypoint ""
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up cache
	uses: actions/cache@v4
	with:
	path: .trivycache/
	key: ${{ runner.os }}-trivy-${{ hashFiles('**/lockfiles') }}
	restore-keys: \|
	${{ runner.os }}-trivy-

	- name: Generate SBOM
	run: trivy fs --format cyclonedx --output sbom.xml .
	env:
	TRIVY_NO_PROGRESS: "true"

	- name: Upload SBOM artifact
	uses: actions/upload-artifact@v4
	with:
	name: sbom
	path: sbom.xml

Provide feedback