This workflow is distributed from
tazama-lf/workflowswithout modification. For full documentation - including trigger details, job steps, required secrets, and known limitations - see:
sbom.yml runs docker build to produce the SBOM. frmscoe rule repos do not contain a Dockerfile, so this workflow fails on every push: main in rule repos. This is a known issue tracked in tazama-lf/workflows#39.