All notable changes to this project will be documented in this file.
This project adheres to Semantic Versioning.
- Initial composite action: fetches SBOM from GitHub Dependency Graph API and submits to PG Atlas via GitHub OIDC authentication.
api-urlinput with production default (current dev API).dry-runinput for testing setup without submitting.- Clear early-failure messages for missing
id-token: writepermission and disabled dependency graph. - Self-test CI workflow (
.github/workflows/ci.yml).