chore: uploads sbom as artifact

.github/workflows/sbom.yml

@@ -0,0 +1,26 @@
+name: sbom
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build SBOM (Software Bill of Materials)
+
+      - name: Install cargo-sbom
+        uses: baptiste0928/cargo-install@v3
+        with:
+          crate: cargo-sbom
+          version: '0.9.1'
+
+      - name: Generate SBOM
+        run: cargo sbom > c2patool-sbom.json
+
+      - name: Upload SBOM
+        uses: actions/[email protected]
+        with:
+          path: c2patool-sbom.json

.gitignore

@@ -12,3 +12,5 @@
 .es509
 
 .vscode
+
+c2patool-sbom.json