[SEC:HIGH][FP=b9c9d7f8] Ensure pipeline steps produce an SBOM

[github-actions]

General Information

• Severity: high
• Title: Ensure pipeline steps produce an SBOM
• Category: pipelineMisconfigurations
• Rule: AVD-PIPELINE-0022
• Alert hash: b9c9d7f81bc010456fdf0dfd639f6518
• First seen: 2026-06-11

Description

Consider adding SBOM generation tool to build job 'Build, Test and Measure'

Location

• Repository: AbsaOSS/StatusBoard
• File: ci-check-jacoco.yml
• Start Line: 36
• End Line: 36

Dependency Details

• Reachable: False