add SBOM

.gitignore

@@ -22,6 +22,7 @@ __pycache__/
 coverage.xml
 htmlcov/
 /.cache/
+bom.json
 
 # Tooling generated
 .tox

tox.ini

@@ -19,6 +19,7 @@ deps =
     pytest-xdist
     pytest-cov
     flake8
+    cyclonedx-py
     -r requirements.txt
 
 commands =
@@ -27,4 +28,5 @@ commands =
     flake8
     mypy {toxinidir}/compendium_v2/ {toxinidir}/test/
     sphinx-build -M html docs/source docs/build -E
+    cyclonedx-py environment --output-format json -o bom.json