Refactor to local bash script runner

.github/workflows/_sbom-template.yml

@@ -5,21 +5,12 @@
 # 2. Replace all occurrences of 'example-app' with your app name
 # 3. Commit and push
 #
-# The workflow will trigger when:
-# - The config.yaml is modified (including version bumps)
-# - The workflow file itself is modified
+# The workflow will trigger on manual dispatch only.
+# Automatic triggers are disabled while using local run.sh.
 
 name: "SBOM: example-app"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/example-app/config.yaml'
-      - '.github/workflows/sbom-example-app.yml'
-
-  # Allow manual triggering
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/ci.yml

@@ -6,15 +6,7 @@
 name: CI
 
 on:
-  schedule:
-    - cron: '0 6 * * *'  # Daily at 6:00 AM UTC
-
-  pull_request:
-    paths:
-      - 'apps/**'
-      - 'scripts/**'
-      - '.github/workflows/sbom-builder.yml'
-      - '.github/workflows/ci.yml'
+  workflow_dispatch: {}
 
 jobs:
   # Find which apps have changed

.github/workflows/sbom-alpine.yml

@@ -9,13 +9,6 @@
 name: "SBOM: alpine"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/alpine/config.yaml'
-      - '.github/workflows/sbom-alpine.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-amazonlinux.yml

@@ -9,13 +9,6 @@
 name: "SBOM: amazonlinux"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/amazonlinux/config.yaml'
-      - '.github/workflows/sbom-amazonlinux.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-bash.yml

@@ -9,13 +9,6 @@
 name: "SBOM: bash"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/bash/config.yaml'
-      - '.github/workflows/sbom-bash.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-caddy.yml

@@ -8,13 +8,6 @@
 name: "SBOM: caddy"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/caddy/config.yaml'
-      - '.github/workflows/sbom-caddy.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-cassandra.yml

@@ -9,13 +9,6 @@
 name: "SBOM: cassandra"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/cassandra/config.yaml'
-      - '.github/workflows/sbom-cassandra.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-debian.yml

@@ -9,13 +9,6 @@
 name: "SBOM: debian"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/debian/config.yaml'
-      - '.github/workflows/sbom-debian.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-dependency-track-frontend.yml

@@ -8,13 +8,6 @@
 name: "SBOM: dependency-track-frontend"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/dependency-track-frontend/config.yaml'
-      - '.github/workflows/sbom-dependency-track-frontend.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-dependency-track.yml

@@ -8,13 +8,6 @@
 name: "SBOM: dependency-track"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/dependency-track/config.yaml'
-      - '.github/workflows/sbom-dependency-track.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-drupal.yml

@@ -9,13 +9,6 @@
 name: "SBOM: drupal"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/drupal/config.yaml'
-      - '.github/workflows/sbom-drupal.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-eclipse-mosquitto.yml

@@ -9,13 +9,6 @@
 name: "SBOM: eclipse-mosquitto"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/eclipse-mosquitto/config.yaml'
-      - '.github/workflows/sbom-eclipse-mosquitto.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-eclipse-temurin.yml

@@ -9,13 +9,6 @@
 name: "SBOM: eclipse-temurin"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/eclipse-temurin/config.yaml'
-      - '.github/workflows/sbom-eclipse-temurin.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-elixir.yml

@@ -9,13 +9,6 @@
 name: "SBOM: elixir"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/elixir/config.yaml'
-      - '.github/workflows/sbom-elixir.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-erlang.yml

@@ -9,13 +9,6 @@
 name: "SBOM: erlang"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/erlang/config.yaml'
-      - '.github/workflows/sbom-erlang.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-fedora.yml

@@ -9,13 +9,6 @@
 name: "SBOM: fedora"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/fedora/config.yaml'
-      - '.github/workflows/sbom-fedora.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-ghost.yml

@@ -9,13 +9,6 @@
 name: "SBOM: ghost"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/ghost/config.yaml'
-      - '.github/workflows/sbom-ghost.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-golang.yml

@@ -9,13 +9,6 @@
 name: "SBOM: golang"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/golang/config.yaml'
-      - '.github/workflows/sbom-golang.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-gradle.yml

@@ -9,13 +9,6 @@
 name: "SBOM: gradle"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/gradle/config.yaml'
-      - '.github/workflows/sbom-gradle.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-haproxy.yml

@@ -9,13 +9,6 @@
 name: "SBOM: haproxy"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/haproxy/config.yaml'
-      - '.github/workflows/sbom-haproxy.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-haskell.yml

@@ -9,13 +9,6 @@
 name: "SBOM: haskell"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/haskell/config.yaml'
-      - '.github/workflows/sbom-haskell.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-httpd.yml

@@ -9,13 +9,6 @@
 name: "SBOM: httpd"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/httpd/config.yaml'
-      - '.github/workflows/sbom-httpd.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-influxdb.yml

@@ -9,13 +9,6 @@
 name: "SBOM: influxdb"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/influxdb/config.yaml'
-      - '.github/workflows/sbom-influxdb.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-julia.yml

@@ -9,13 +9,6 @@
 name: "SBOM: julia"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/julia/config.yaml'
-      - '.github/workflows/sbom-julia.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-keycloak-js.yml

@@ -8,13 +8,6 @@
 name: "SBOM: keycloak-js"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/keycloak-js/config.yaml'
-      - '.github/workflows/sbom-keycloak-js.yml'
-
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-keycloak.yml

@@ -5,14 +5,6 @@
 name: "SBOM: keycloak"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/keycloak/config.yaml'
-      - '.github/workflows/sbom-keycloak.yml'
-
-  # Allow manual triggering
   workflow_dispatch:
     inputs:
       dry_run:

.github/workflows/sbom-kong.yml

@@ -9,13 +9,6 @@
 name: "SBOM: kong"
 
 on:
-  push:
-    branches:
-      - master
-    paths:
-      - 'apps/kong/config.yaml'
-      - '.github/workflows/sbom-kong.yml'
-
   workflow_dispatch:
     inputs:
       dry_run: