.github/workflows/generate-sbom-main.yml

#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

name: Generate Camel K Runtime SBOM

on:
  schedule:
    # Every 24 hours
  - cron: '30 17 * * 0'
  workflow_dispatch:
  
jobs:
  build:
    name: Camel K Runtime SBOM Generation
    if: github.repository == 'apache/camel-k-runtime'
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Camel-k-runtime project
        uses: actions/checkout@v3
        with:
          ref: main
          persist-credentials: false
          fetch-depth: 0
      - name: Set up JDK
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: 11
          cache: 'maven'
      - name: Build Camel-k-runtime Project for generating SBOM
        run: ./mvnw -V --no-transfer-progress clean install -DskipTests -Psbom
      - name: Create Pull Request
        uses: peter-evans/create-pull-request@v5.0.1
        with:
          base: main
          token: ${{ secrets.GITHUB_TOKEN }}
          branch: regen_bot_sbom
          title: '[Github Actions] Periodic Sync Camel K Runtime SBOM'
          body: |
            Camel-K-runtime for SBOM Generation.
            see https://github.com/apache/camel-k-runtime/blob/main/.github/workflows/generate-sbom-main.yml