[SEC:HIGH][FP=cad917c9] Ensure pipeline steps produce an SBOM

[github-actions]

General Information

• Severity: high
• Title: Ensure pipeline steps produce an SBOM
• Category: pipelineMisconfigurations
• Rule: AVD-PIPELINE-0022
• Alert hash: cad917c9ed4066160ba5f86fcdb379cc
• First seen: 2026-06-23

Description

Consider adding SBOM generation tool to build job 'JaCoCo Report'

Location

• Repository: AbsaOSS/atum-service
• File: jacoco_report.yml
• Start Line: 73
• End Line: 73

Dependency Details

• Reachable: False