add config to upload bom (planning#1330)

ci/gitlab-ci.yml

@@ -18,6 +18,7 @@ stages:
   - cve-scan
   - build
   - deploy
+  - upload
 
 variables:
   DEPLOY_SERVER: fitko@dorado.uberspace.de
@@ -108,10 +109,16 @@ trivy-filesystem:
     entrypoint: [""]
   script:
     - trivy filesystem --download-db-only
+    - trivy filesystem --format cyclonedx --output sbom-src.json .
     - trivy filesystem --scanners vuln,config --exit-code 1 --severity HIGH,CRITICAL      yarn.lock
     - trivy filesystem --scanners vuln,config --exit-code 0 --severity UNKNOWN,LOW,MEDIUM yarn.lock
   cache: []
 
+dtrack-sbom-fs-main:
+  extends: .dtrack-sbom-fs-main
+
+dtrack-sbom-fs-tag:
+  extends: .dtrack-sbom-fs-tag
 
 yarn-audit:
   stage: cve-scan