infra([DST-633]): setup dependency track

[aromko]

Description

We integrate dependency track in our build pipeline. There is a new github action which will be triggered when we merge branches into main. Than a bom will be generated and uploaded to the server in our project. The result can be viewed in dependency track.

What should be tested?

Access to dependency track: https://dependencytrack.reservix.io/dashboard

Reviewers:

@marigold-ui/developer

[changeset-bot]

⚠️ No Changeset found

Latest commit: d8ab086

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
marigold-docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Dec 24, 2024 7:29am
marigold-storybook	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Dec 24, 2024 7:29am

1 Skipped Deployment

Name	Status	Preview	Comments	Updated (UTC)
marigold-production	⬜️ Ignored (Inspect)	Visit Preview	💬 Add feedback	Dec 24, 2024 7:29am

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟢	Statements	99.59%	8169/8203
🟢	Branches	88.14% (-1.67% 🔻)	364/413
🟢	Functions	99.25%	133/134
🟢	Lines	99.59%	8169/8203

Show files with reduced coverage 🔻

St.❔	File	Statements	Branches	Functions	Lines
🟢	... / Checkbox.tsx	97.47% (-2.53% 🔻)	60% (-24.62% 🔻)	100%	97.47% (-2.53% 🔻)
🟢	... / HelpText.tsx	97.83% (-2.17% 🔻)	76.92% (-23.08% 🔻)	100%	97.83% (-2.17% 🔻)
🟢	system/src/utils.ts	100%	69.23% (-18.27% 🔻)	100%	100%

Test suite run success

589 tests passing in 79 suites.

Report generated by 🧪jest coverage report action from d8ab086