Weekly SBOM Update

This repository uses a GitHub Actions workflow to fetch and update the Software Bill of Materials (SBOM) for care and care_fe every week on Sunday, deploying the data to GitHub Pages.

The latest SBOM data is available at: https://sbom.ohc.network/

NOTE: To access SBOM data, navigate to :

• Care https://sbom.ohc.network/care/v3.0.0/sbom.json
• Care_fe https://sbom.ohc.network/care_fe/v3.0.0/sbom.json

Workflow Overview

The workflow, defined in .github/workflows/fetch-sbom.yml, has two main jobs:

1. fetch-sbom Job

• Checkout repository
• Fetch latest release versions of care and care_fe using the GitHub API
• Create SBOM directories if they don’t exist and fetch SBOM data
• Commit & push changes if updates are found

2. deploy-sbom Job

• Deploys SBOM data to GitHub Pages using peaceiris/actions-gh-pages@v4

Workflow Triggers

• Scheduled: Runs every Sunday at midnight IST (18:30 UTC Saturday)
• Manual Dispatch: Can be triggered manually

Permissions

• contents: write – Commit & push changes
• pages: write – Deploy SBOM data

License

This project is licensed under the MIT License.