Gate: sbom-generated

The inventory of shipped components (SBOM) is generated and versionable.

Property	Value
Command	syft scan dir:. -o cyclonedx-json=sbom.json -q
Confronts	code
Blocking by default — new project	no — informs
Blocking by default — existing project	no — informs

Declaring it

gates:
  - name: sbom-generated
    on: [code]
    run: "syft scan dir:. -o cyclonedx-json=sbom.json -q"