chore: make use of Webpack for building CSS and JS files (#2127) #2

	name: Build SBOMs

	on:
	push:
	branches:
	- master
	paths:
	- 'package-lock.json'
	- 'poetry.lock'

	jobs:
	js-sbom:
Check failure on line 12 in .github/workflows/sbom.yaml View workflow run for this annotation GitHub Actions / Build SBOMs Invalid workflow file `The workflow is not valid. .github/workflows/sbom.yaml (Line: 12, Col: 3): The workflow must contain at least one job with no dependencies.`
	needs: run-tests
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	contents: read
	attestations: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Build and upload SBOM
	uses: sbomify/github-action@master
	env:
	TOKEN: ${{ secrets.SBOMIFY_TOKEN }}
	COMPONENT_ID: 'LCkvzm8qaL'
	SBOM_FILE: 'package-lock.json'
	AUGMENT: true
	UPLOAD: true
	OUTPUT_FILE: js.cdx.json

	- name: Attest
	uses: actions/attest-build-provenance@v1
	with:
	subject-path: '${{ github.workspace }}/*.cdx.json'

	python-sbom:
	needs: run-tests
	runs-on: ubuntu-latest
	permissions:
	id-token: write
	contents: read
	attestations: write

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Build and upload SBOM
	uses: sbomify/github-action@master
	env:
	TOKEN: ${{ secrets.SBOMIFY_TOKEN }}
	COMPONENT_ID: 'Vhc4zm8pdV'
	SBOM_FILE: 'poetry.lock'
	AUGMENT: true
	UPLOAD: true
	OUTPUT_FILE: python.cdx.json

	- name: Attest
	uses: actions/attest-build-provenance@v1
	with:
	subject-path: '${{ github.workspace }}/*.cdx.json'

Provide feedback