@greenarmor/ges-cicd-generator 0.6.0 → 0.6.2

package/dist/index.d.ts

@@ -7,4 +7,5 @@ export declare function generateComplianceWorkflow(config: ProjectConfig): Workf
 export declare function generateSecurityWorkflow(config: ProjectConfig): WorkflowFile;
 export declare function generateDependencyScanWorkflow(config: ProjectConfig): WorkflowFile;
 export declare function generateSecretScanWorkflow(config: ProjectConfig): WorkflowFile;
+export declare function generateSbomWorkflow(config: ProjectConfig): WorkflowFile;
 export declare function generateAllWorkflows(config: ProjectConfig): WorkflowFile[];

package/dist/index.js

@@ -157,11 +157,67 @@ jobs:
 `,
     };
 }
+export function generateSbomWorkflow(config) {
+    return {
+        filePath: path.join(".github", "workflows", "sbom-scan.yml"),
+        content: `name: SBOM Generation & Scan
+
+on:
+  push:
+    branches: [main, develop]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: '0 6 * * 1'
+
+jobs:
+  sbom:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Generate SBOM with Syft
+        uses: anchore/sbom-action@v0
+        with:
+          image: ""
+          path: .
+          format: cyclonedx-json
+          output-file: sbom.json
+          fail-build: false
+
+      - name: Scan SBOM for vulnerabilities with Grype
+        uses: anchore/scan-action@v6
+        with:
+          sbom: sbom.json
+          fail-build: true
+          severity-cutoff: high
+
+      - name: Generate SBOM with Trivy
+        uses: aquasecurity/trivy-action@master
+        with:
+          scan-type: 'fs'
+          scan-ref: '.'
+          format: 'cyclonedx'
+          output: 'trivy-sbom.json'
+
+      - name: Upload SBOM artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: sbom-artifacts
+          path: |
+            sbom.json
+            trivy-sbom.json
+          retention-days: 90
+`,
+    };
+}
 export function generateAllWorkflows(config) {
     return [
         generateComplianceWorkflow(config),
         generateSecurityWorkflow(config),
         generateDependencyScanWorkflow(config),
         generateSecretScanWorkflow(config),
+        generateSbomWorkflow(config),
     ];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greenarmor/ges-cicd-generator",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "type": "module",
   "description": "GESF CI/CD Generator - GitHub Actions workflow generation",
   "main": "./dist/index.js",
@@ -12,7 +12,7 @@
     }
   },
   "dependencies": {
-    "@greenarmor/ges-core": "0.6.0"
+    "@greenarmor/ges-core": "0.6.2"
   },
   "devDependencies": {
     "typescript": "^6.0.0",