fixup! IONOS(sbom-matrix): add SBOM generation workflow

Signed-off-by: Misha M.-Kupriyanov <kupriyanov@strato.de>

Author: printminion-co

.github/workflows/sbom-matrix.yaml

@@ -62,6 +62,7 @@ on:
 
 env:
   NODE_OPTIONS: "--max-old-space-size=4096"
+  PARENT_UUID: "95d97ac1-1e35-49e3-862a-4bb23de9c68e" # @todo: Update to actual UUID of parent project in Dependency Track
 
 jobs:
   # Job 1: Extract version information from the repository
@@ -119,6 +120,7 @@ jobs:
             "component": [
               {
                 "name": "nextcloud",
+                "project_name": "HiDrive NEXT Core",
                 "path": ".",
                 "has_composer": true,
                 "has_npm": true,
@@ -128,6 +130,7 @@ jobs:
               },
               {
                 "name": "theme-nc-ionos-theme-legacy",
+                "project_name": "HiDrive NEXT Theme: nc-ionos-theme",
                 "path": "themes/nc-ionos-theme/IONOS",
                 "has_composer": false,
                 "has_npm": true,
@@ -136,6 +139,7 @@ jobs:
               },
               {
                 "name": "app-simplesettings",
+                "project_name": "HiDrive NEXT App: simplesettings",
                 "path": "apps-custom/simplesettings",
                 "has_composer": true,
                 "has_npm": true,
@@ -145,6 +149,7 @@ jobs:
               },
               {
                 "name": "app-googleanalytics",
+                "project_name": "HiDrive NEXT App: googleanalytics",
                 "path": "apps-custom/googleanalytics",
                 "has_composer": true,
                 "has_npm": false,
@@ -153,6 +158,7 @@ jobs:
               },
               {
                 "name": "app-ionos-processes",
+                "project_name": "HiDrive NEXT App: nc_ionos_processes",
                 "path": "apps-custom/nc_ionos_processes",
                 "has_composer": true,
                 "has_npm": false,
@@ -161,6 +167,7 @@ jobs:
               },
               {
                 "name": "app-theming",
+                "project_name": "HiDrive NEXT App: nc_theming",
                 "path": "apps-custom/nc_theming",
                 "has_composer": true,
                 "has_npm": false,
@@ -169,6 +176,7 @@ jobs:
               },
               {
                 "name": "app-viewer",
+                "project_name": "HiDrive NEXT App: viewer",
                 "path": "apps-external/viewer",
                 "has_composer": true,
                 "has_npm": true,
@@ -178,6 +186,7 @@ jobs:
               },
               {
                 "name": "app-user_oidc",
+                "project_name": "HiDrive NEXT App: user_oidc",
                 "path": "apps-external/user_oidc",
                 "has_composer": true,
                 "has_npm": true,
@@ -187,6 +196,7 @@ jobs:
               },
               {
                 "name": "app-groupquota",
+                "project_name": "HiDrive NEXT App: groupquota",
                 "path": "apps-external/groupquota",
                 "has_composer": true,
                 "has_npm": false,
@@ -195,6 +205,7 @@ jobs:
               },
               {
                 "name": "app-richdocuments",
+                "project_name": "HiDrive NEXT App: richdocuments",
                 "path": "apps-external/richdocuments",
                 "has_composer": true,
                 "has_npm": true,
@@ -204,6 +215,7 @@ jobs:
               },
               {
                 "name": "app-files_downloadlimit",
+                "project_name": "HiDrive NEXT App: files_downloadlimit",
                 "path": "apps-external/files_downloadlimit",
                 "has_composer": true,
                 "has_npm": true,
@@ -213,6 +225,7 @@ jobs:
               },
               {
                 "name": "app-serverinfo",
+                "project_name": "HiDrive NEXT App: serverinfo",
                 "path": "apps-external/serverinfo",
                 "has_composer": true,
                 "has_npm": false,
@@ -346,7 +359,7 @@ jobs:
   # 4. Uploads each SBOM to the corresponding Dependency Track project
   # 5. Uses custom CA certificate for secure communication with Dependency Track
   upload-sboms:
-    needs: [ setup-matrix, generate-sbom ]
+    needs: [ get-version, setup-matrix, generate-sbom ]
     runs-on: self-hosted
 
     steps:
@@ -367,6 +380,7 @@ jobs:
           DT_API_KEY: ${{ secrets.DEPENDENCY_TRACK_API_KEY }}
           IONOS_CA_CERT: ${{ secrets.IONOS_CA }}
           MATRIX_CONTEXT: ${{ needs.setup-matrix.outputs.matrix }}
+          PARENT_VERSION: ${{ needs.get-version.outputs.project_version }}
           VARS_CONTEXT: ${{ toJSon(vars) }}
         run: |
           # Create temporary CA cert file
@@ -379,6 +393,7 @@ jobs:
           upload_bom() {
             local bom_file="$1"
             local project_id="$2"
+            local project_name="$3"
             
             if [[ ! -f "$bom_file" ]]; then
               echo "Warning: $bom_file not found, skipping..."
@@ -397,6 +412,11 @@ jobs:
               -H "Content-Type: multipart/form-data" \
               -H "X-API-Key: ${DT_API_KEY}" \
               -F "project=${project_id}" \
+              -F "isLatest=true" \
+              -F "autoCreate=true" \
+              -F "parentUUID=${PARENT_UUID}" \
+              -F "projectName=${PARENT_VERSION}" \
+              -F "projectVersion=1.0.8" \
               -F "bom=@${bom_file}")
             
             http_code=$(echo "$response" | grep -o "HTTPSTATUS:[0-9]*" | cut -d: -f2)
@@ -422,6 +442,7 @@ jobs:
             project_id_var_name=$(echo "$component_json" | jq -r '.project_id')
             component_name=$(echo "$component_json" | jq -r '.name')
             project_id_var_value=$(echo "$VARS_CONTEXT" | jq -r --arg key "$project_id_var_name" '.[$key]')
+            project_name=$(echo "$component_json" | jq -r '.project_name')
 
             echo "Processing component: ${component_name}"
 
@@ -439,7 +460,7 @@ jobs:
               continue
             fi
 
-            upload_bom "$bom_file" "$project_id_var_value" || exit 1
+            upload_bom "$bom_file" "$project_id_var_value" "$project_name" || exit 1
           done
 
           # Cleanup