feat: add SBOM generation for supply chain transparency

- Add npm script sbom:generate using CycloneDX
- Add GitHub Actions workflow to auto-generate SBOM on release
- Output both JSON and XML formats
This commit is contained in:
ZacharyZcR
2026-01-15 03:01:47 +08:00
parent dd62b77c79
commit 408af2a13f
2 changed files with 61 additions and 1 deletions

View File

@@ -25,7 +25,8 @@
"build:linux-portable": "npm run build && electron-builder --linux --dir",
"build:linux-appimage": "npm run build && electron-builder --linux AppImage",
"build:linux-targz": "npm run build && electron-builder --linux tar.gz",
"build:mac": "npm run build && electron-builder --mac --universal"
"build:mac": "npm run build && electron-builder --mac --universal",
"sbom:generate": "npx @cyclonedx/cyclonedx-npm --output-file sbom.json --output-format JSON && npx @cyclonedx/cyclonedx-npm --output-file sbom.xml --output-format XML"
},
"dependencies": {
"@codemirror/autocomplete": "^6.18.7",