Update node to latest LTS and add SBOM generation during pipeline runs

.github/workflows/ci-pipeline.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v2
         with:
-          node-version: "16.13.0"
+          node-version: "18.18.0"
           cache: "npm"
 
       - run: npm install
@@ -82,6 +82,11 @@ jobs:
           docker tag ${{ env.IMAGE_NAME }}:${{ github.sha }} ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
           docker push --all-tags ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
+      - name: Generate SBOM and upload to GitHub
+        uses: anchore/[email protected]
+        with:
+          image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}
+
   deploy:
     needs: [build-push-image]
     if: github.ref == 'refs/heads/main'

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:16-alpine
+FROM node:18-alpine
 
 # make a pipe fail on the first failure
 SHELL ["/bin/sh", "-o", "pipefail", "-c"]