[SEC:HIGH][FP=dba2c2da] Ensure pipeline steps produce an SBOM

[github-actions]

General Information

• Severity: high
• Title: Ensure pipeline steps produce an SBOM
• Category: pipelineMisconfigurations
• Rule: AVD-PIPELINE-0022
• Alert hash: dba2c2da4c581580fa152503e850b8ff
• First seen: 2026-05-22

Description

Consider adding SBOM generation tool to build job 'Test Database and Server'

Location

• Repository: AbsaOSS/atum-service
• File: build.yml
• Start Line: 48
• End Line: 48

Dependency Details

• Reachable: False

[lsulak]

I'm flagging this as a false alarm now, it's been developed as a job here: #482