From fd183c0cdfb0e0be926db989bc27b7069533f7d5 Mon Sep 17 00:00:00 2001
From: Amrutha G <amrutha.g@ni.com>
Date: Mon, 5 Oct 2026 14:53:12 +0530
Subject: [PATCH 1/2] Add SBOM generation workflow

---
 .github/workflows/generate-sbom.yml | 43 +++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 .github/workflows/generate-sbom.yml

diff --git a/.github/workflows/generate-sbom.yml b/.github/workflows/generate-sbom.yml
new file mode 100644
index 00000000..13e44302
--- /dev/null
+++ b/.github/workflows/generate-sbom.yml
@@ -0,0 +1,43 @@
+name: Generate SBOM
+
+permissions:
+  contents: read
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  version:
+    name: Resolve Version
+    runs-on: ubuntu-latest
+    outputs:
+      version: ${{ steps.version.outputs.version }}
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - id: version
+        name: Get version from latest tag
+        shell: pwsh
+        run: |
+          $tag = git tag -l "v*.*.*" --sort=-version:refname | Select-Object -First 1
+          $version = if ($tag) { ($tag -replace '^v', '') -replace '-.*$', '' } else { '0.0.0' }
+          "version=$version" | Out-File -FilePath $env:GITHUB_OUTPUT -Append -Encoding utf8
+
+  sbom:
+    name: Generate SBOM
+    needs: version
+    # TODO: pin to a release tag when the reusable action is published.
+    uses: ni/open-source/.github/workflows/reusable-generate-sbom.yml@users/amrutha/sbom-generation-action
+    with:
+      lvproj_path: Core/AF PPL Build.lvproj
+      labview_version: '2026q1'
+      labview_bitness: '64'
+      build_spec_name: 'AF PPL'
+      target_name: 'My Computer'
+      product_name: actor-framework
+      product_version: ${{ needs.version.outputs.version }}
+      output_path: builds/sbom/actor-framework.cdx.json
+      artifact_name: actor-framework-sbom

From 06dbc8d20d299cc6e4e30b23ecf6d80cb275041b Mon Sep 17 00:00:00 2001
From: Amrutha G <amrutha.g@ni.com>
Date: Tue, 6 Oct 2026 10:38:17 +0530
Subject: [PATCH 2/2] Schedule weekly SBOM generation

---
 .github/workflows/generate-sbom.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/generate-sbom.yml b/.github/workflows/generate-sbom.yml
index 13e44302..37cfaa80 100644
--- a/.github/workflows/generate-sbom.yml
+++ b/.github/workflows/generate-sbom.yml
@@ -4,8 +4,8 @@ permissions:
   contents: read
 
 on:
-  push:
-  pull_request:
+  schedule:
+    - cron: '0 10 * * 6'
 
 jobs:
   version:
@@ -30,7 +30,7 @@ jobs:
     name: Generate SBOM
     needs: version
     # TODO: pin to a release tag when the reusable action is published.
-    uses: ni/open-source/.github/workflows/reusable-generate-sbom.yml@users/amrutha/sbom-generation-action
+    uses: ni/open-source/.github/workflows/reusable-generate-sbom.yml@actions
     with:
       lvproj_path: Core/AF PPL Build.lvproj
       labview_version: '2026q1'