Repository navigation

Added note about the App interface to README.md #44

	name: Generate SBOM

	on:
	push:
	branches: [ "master", "ci" ]
	pull_request:
	branches: [ "master" ]

	permissions:
	contents: read

	jobs:
	sbom:

	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v6

	# Liest die Core-Version aus CMakeLists.txt
	- name: Get software version
	run: \|
	VER=`grep -E -o "version[[:blank:]]+=[[:blank:]]\"+[[:digit:]]+\.[[:digit:]]+\.[[:digit:]]+" pyproject.toml \| sed "s/[^0-9.]*//g"`
	echo "Software version '$VER' detected"
	echo "SW_VERSION=$VER" >> $GITHUB_ENV

	# Create a package of the source code so that we can hash it for the SBOM
	- name: Create package
	run: \|
	mkdir package
	zip package/cri_lib.zip cri_lib/*

	- name: Export package
	uses: actions/upload-artifact@v7
	with:
	name: sources
	path: package/cri_lib.zip

	- name: Create SBOM
	uses: sbomify/sbomify-action@master
	env:
	LOCK_FILE: requirements.txt
	OUTPUT_FILE: sbom_temp.cdx.json
	COMPONENT_NAME: CRI-Python-Lib
	COMPONENT_VERSION: ${{ env.SW_VERSION }}
	# Produkt- und Firmeninfo werden aus sbomify.json geladen
	AUGMENT: true
	# Metadaten aus Paket-Registry hinzufügen
	ENRICH: true
	UPLOAD: false

	- name: Final SBOM enrichment
	uses: CommonplaceRobotics/Action_SBOM_Enrichment@v9
	with:
	database: .github/workflows/sbom_enrichment_db.json
	sbom: sbom_temp.cdx.json
	sbom_out: sbom.cdx.json

	- name: Export SBOM
	uses: actions/upload-artifact@v7
	with:
	path: sbom.cdx.json
	archive: false

	- name: Validate SBOM with company policies
	uses: CommonplaceRobotics/Action_Validate_SBOM@v6
	with:
	sbom: sbom.cdx.json