ci: fix dependency-scan SBOM workflow to scan released packages#1287

Merged

joker23 merged 6 commits into

mainfrom

skz/sdk-2170/ci-SBOM

Apr 27, 2026

Commits on Apr 24, 2026

fix(ci): enable corepack in dependency-scan so cdxgen produces a real SBOM

joker23
and
claude
committed
fix(ci): disable immutable installs for dependency-scan

joker23
and
claude
committed
fix(ci): test omit-optional flag to exclude LGPL optional deps from SBOM

joker23
and
claude
committed
fix(ci): skip platform-specific optional deps to avoid LGPL false positives

joker23
and
claude
committed
fix(ci): use yarn config set for supportedArchitectures

joker23
and
claude
committed
fix(ci): scope dependency install to released packages only

joker23
and
claude
committed