Add release sbom to Github workflow (#3) #10

	# Copyright 2024 Circle Internet Group, Inc. All rights reserved.
	#
	# SPDX-License-Identifier: Apache-2.0
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.

	name: CI
	on:
	push:
	branches: [master]
	pull_request:

	permissions:
	contents: write

	jobs:
	run_ci_tests:
	runs-on: ubuntu-latest
	steps:
	- name: Check out repository code
	uses: actions/checkout@v4

	- name: Install Node
	uses: actions/setup-node@v3
	with:
	node-version: "20.14.0"

	- name: Setup CI Environment
	run: bash setup.sh

	- name: Run static checks
	run: bash run.sh static_checks

	- name: Run Move tests
	run: bash run.sh test

	- name: Run Move tests on v2
	run: \|
	git apply packages/stablecoin/examples/v2_base.patch
	bash run.sh test
	git apply -R packages/stablecoin/examples/v2_base.patch

	scan:
	if: github.event_name == 'pull_request'
	uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
	with:
	allow-reciprocal-licenses: false

	release-sbom:
	if: github.event_name == 'push'
	uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1

Provide feedback