{
  "$schema": "https://json-schema.org/schema",
  "version": 2,
  "title": "SBOM executor",
  "description": "Generate an SBOM for the project from the workspace lockfile pruned to the project's transitive production dependencies.",
  "type": "object",
  "properties": {
    "format": {
      "type": "string",
      "enum": ["spdx", "cyclonedx"],
      "default": "spdx",
      "description": "npm sbom output format."
    },
    "outputPath": {
      "type": "string",
      "description": "Workspace-relative directory the SBOM is written to — the KAB archive dir (next to ui.zip) when wired by buildKabTargets. Default: dist/sbom/<projectRoot>."
    },
    "softFail": {
      "type": "boolean",
      "default": false,
      "description": "When true, an SBOM failure logs a warning and reports success so dependent targets (kab) still run."
    }
  },
  "additionalProperties": false
}