name: Generate BOM

on:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  build:

    runs-on: windows-2022

    steps:
    - name: Checkout
      run: git config --global core.autocrlf true
    - uses: actions/checkout@v4
      with:
        submodules: true
        persist-credentials: false

    - name: Install CycloneDX
      run: dotnet tool install --global CycloneDX
      
    - name: Analyze
      run: dotnet-CycloneDX ILSpy/ILSpy.csproj --output sbom --recursive --exclude-dev --exclude-test-projects

    - name: Upload BOM
      uses: actions/upload-artifact@v4
      with:
        name: ILSpyBOM.xml
        path: sbom/bom.xml
        if-no-files-found: error