name: SBOM

on:
  release:
    types: [published]
  workflow_dispatch:

permissions: {}

jobs:
  sbom:
    uses: mozilla/actions/.github/workflows/sbom.yml@2e46408d5c495e59a21e5e125e82008fad0d9408 # v1.1.7
    permissions:
      actions: read # Required by anchore/sbom-action to read workflow run context.
      contents: write # Required to upload the SBOM as a release asset.