[SEC:HIGH][FP=11cbb2a7] Ensure pipeline steps produce an SBOM

[github-actions]

General Information

• Severity: high
• Title: Ensure pipeline steps produce an SBOM
• Category: pipelineMisconfigurations
• Rule: AVD-PIPELINE-0022
• Alert hash: 11cbb2a7352ba44a4f444fb1f649a5dc
• First seen: 2026-05-22

Description

Consider adding SBOM generation tool to build job 'Test Agent, Reader and Model'

Location

• Repository: AbsaOSS/atum-service
• File: build.yml
• Start Line: 26
• End Line: 26

Dependency Details

• Reachable: False