From d2e0c8b1cf008025a577318c01369129f7a7cde5 Mon Sep 17 00:00:00 2001
From: Xae <zishwrld@gmail.com>
Date: Wed, 22 Jul 2026 16:13:35 +0530
Subject: [PATCH] Add CBOM generation workflow

This workflow automates the creation and upload of a Component Bill of Materials (CBOM) for Java projects.
---
 .github/workflows/cbom.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 .github/workflows/cbom.yml

diff --git a/.github/workflows/cbom.yml b/.github/workflows/cbom.yml
new file mode 100644
index 0000000000..6232ef570d
--- /dev/null
+++ b/.github/workflows/cbom.yml
@@ -0,0 +1,24 @@
+name: CBOM Generation (IBM PQCA)
+on:
+  workflow_dispatch:
+
+jobs:
+  cbom-scan:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Create CBOM
+        uses: cbomkit/cbomkit-action@v2.1.1
+        id: cbom
+        env:
+          CBOMKIT_LANGUAGES: java
+
+      - name: Upload CBOM Artifact
+        uses: actions/upload-artifact@v4
+        with: 
+          name: "CBOM-Output"
+          path: ${{ steps.cbom.outputs.pattern }}