ci(security): generate cyclonedx sbom, add sbom upload to ci and update stride security model

2026-10-20 15:13:52 -03:00
parent 300944697f
commit 06c90b4e86
7 changed files with 109 additions and 58 deletions
@@ -55,6 +55,16 @@ jobs:
            modules/*/target/site/spotbugs/**
          retention-days: 14

+      - name: Publicar CycloneDX SBOM (Software Bill of Materials)
+        uses: actions/upload-artifact@v4
+        if: always()
+        with:
+          name: cyclonedx-sbom
+          path: |
+            target/bom.json
+            target/bom.xml
+          retention-days: 30
+
  build-windows:
    name: Build & Verify (Windows)
    # Runner Windows: requer act_runner nativo em Windows na instância Gitea.