feat: add SBOM generation and release workflow

.github/workflows/generate_and_release_sbom.yml

@@ -0,0 +1,46 @@
+name: Generate and Release SBOM of the AskUI NodeJS SDK
+on:
+  release:
+    types: [published]
+
+env:
+  NODE_VERSION: 20
+jobs:
+  generate_and_release_sbom:
+    name: Generate and Release SBOM of the AskUI NodeJS SDK
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: packages/askui-nodejs
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Load secret
+        uses: 1password/load-secrets-action@v2
+        with:
+          export-env: true
+        env:
+          OP_SERVICE_ACCOUNT_TOKEN: ${{ secrets.OP_SOLUTIONS_ENGINEER_SERVICE_ACCOUNT_TOKEN }}
+          DT_API_KEY: "op://github-ci-solutions-engineer-team/DependencyTrack-API-KEY/API-KEY"
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+          registry-url: 'https://registry.npmjs.org'
+      - name: Install 
+        run: npm ci
+      - name: Extract Version from package.json
+        id: version
+        run: |
+          VERSION=$(cat package.json | jq -r '.version')
+          echo "version=$VERSION" >> $GITHUB_ENV
+      - name: Generate SBOM
+        run: npm run generate:SBOM
+      - name: Upload SBOM to Dependency Track
+        uses: askui/action-sbom-deploy@main
+        with:
+          apiKey: ${{ env.DT_API_KEY }}
+          projectName: "AskUI-NodeJS-SDK"
+          projectVersion: '${{ steps.version.outputs.version }}'
+          baseTags: 'AskUI-NodeJS-SDK,Solutions-Engineer-Team,public_api'
+          bomFilename: 'bom.json'

.gitignore

@@ -18,3 +18,4 @@ npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
 packages/askui-nodejs/release/*
+packages/askui-nodejs/bom.json