How to sign an SBOM in GitHub Actions (with OpenSSL verification)

Cryptographic SBOM signing in 3 lines of YAML. Public verify URLs anyone can check with openssl alone. Free for one repo forever.

canonical_url: https://ledgerprove.com/blog/github-actions-sbom-signing-quickstart