[releng] Publish the generated SBOM artifact

.github/workflows/build.yml

@@ -9,6 +9,8 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    outputs:
+      project-version: ${{ steps.export.outputs.PROJECT_VERSION }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -25,4 +27,12 @@ jobs:
           . dbus-env
           mutter --no-x11 --headless --virtual-monitor 1920x1080 &
       - name: Build
-        run: ./mvnw -B -ntp clean verify
+        run: |
+          ./mvnw -B -ntp clean verify
+          VERSION=$(./mvn -q -Dexec.executable="echo" -Dexec.args='${project.version}' --non-recursive org.codehaus.mojo:exec-maven-plugin:3.1.0:exec)
+          echo "PROJECT_VERSION=$VERSION" >> $GITHUB_OUTPUT
+      - name: Upload sbom
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
+        with:
+          name: sbom
+          path: releng/org.eclipse.emf.validation.repository/target/bom.json