From 0e1e147697de4233defa327212dd9ebae1eb1cda Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Stefan=20B=C3=BCrk?= <stefan@buerk.tech>
Date: Mon, 24 Aug 2026 14:25:27 +0200
Subject: [PATCH] [TASK] Add sbom workflow

---
 .github/workflows/sbom.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/workflows/sbom.yml

diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
new file mode 100644
index 0000000..b44f26d
--- /dev/null
+++ b/.github/workflows/sbom.yml
@@ -0,0 +1,18 @@
+name: SBOM
+on:
+  push:
+    branches: [main]
+    tags: ['*']
+  schedule:
+    # weekly, Monday 04:00 UTC 
+    - cron: '0 4 * * 1'
+  workflow_dispatch:
+
+jobs:
+  sbom:
+    uses: web-vision/.github/.github/workflows/sbom-reusable.yml@v1.0.3
+    with:
+      dry_run: false
+    secrets:
+      DTRACK_API_KEY: ${{ secrets.DTRACK_API_KEY }}
+      DTRACK_API_URL: ${{ secrets.DTRACK_API_URL }}