diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index d92108c..0a3584a 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -24,4 +24,13 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@nightly
-      - run: cargo test --verbose
\ No newline at end of file
+      - run: cargo test --verbose
+  sbom:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@nightly
+      - run: |
+        cargo install cargo-sbom
+        cargo sbom > skootrs.spdx.json
\ No newline at end of file