From f9b24be3faeba379917315763815af8354c2827b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maxime=20Dr=C3=A9an?= <maximedrean@proton.me>
Date: Tue, 7 Jul 2026 22:24:40 +0200
Subject: [PATCH] ci: switch SBOM generation to cdxgen for Bun support

---
 .github/workflows/release.yaml | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 2f117cc..1eed8e5 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -47,15 +47,8 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - name: Setup Node.js (for SBOM tool)
-        uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
       - name: Generate SBOM
-        run:
-          npx @cyclonedx/cyclonedx-npm --output-format json --output-file
-          bom.json
+        run: bunx @cyclonedx/cdxgen@latest -t bun -o bom.json --spec-version 1.5
 
       - name: Upload SBOM
         uses: actions/upload-artifact@v4