Add GitHub Actions build/release workflows, bump version to 1.0

.github/workflows/build.yml

@@ -0,0 +1,29 @@
+name: Build
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Build with Maven
+        run: mvn clean package
+
+      - name: Upload jar artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: runtime-analyst-jar
+          path: target/runtime-analyst-*.jar

.github/workflows/release.yml

@@ -0,0 +1,31 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  build-and-release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          java-version: '17'
+          distribution: 'temurin'
+          cache: maven
+
+      - name: Build with Maven
+        run: mvn clean package
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: target/runtime-analyst-*.jar
+          generate_release_notes: true

.gitignore

@@ -19,6 +19,8 @@ CLAUDE.md
 # Generated files
 *.csv
 cbom*.json
+aibom*.json
+blueprint*.json
 
 # Shell scripts (may contain credentials)
 *.sh

pom.xml

@@ -5,14 +5,14 @@
     <modelVersion>4.0.0</modelVersion>
 
     <groupId>com.contrastsecurity</groupId>
-    <artifactId>bom-squad</artifactId>
-    <version>1.0-SNAPSHOT</version>
-    <name>BOM Squad</name>
+    <artifactId>runtime-analyst</artifactId>
+    <version>1.0</version>
+    <name>Runtime Analyst</name>
     <description>Generates CycloneDX CBOM/AI-BOM inventories from Contrast Security runtime observability data, with an AI-powered advisor for each.</description>
 
     <properties>
-        <maven.compiler.source>1.8</maven.compiler.source>
-        <maven.compiler.target>1.8</maven.compiler.target>
+        <maven.compiler.source>17</maven.compiler.source>
+        <maven.compiler.target>17</maven.compiler.target>
     </properties>
 
     <dependencies>
@@ -41,6 +41,11 @@
             <artifactId>cyclonedx-core-java</artifactId>
             <version>13.0.0</version>
         </dependency>
+        <dependency>
+            <groupId>com.microsoft.playwright</groupId>
+            <artifactId>playwright</artifactId>
+            <version>1.62.0</version>
+        </dependency>
     </dependencies>
 
     <build>
@@ -50,12 +55,12 @@
                 <artifactId>maven-compiler-plugin</artifactId>
                 <version>3.15.0</version>
                 <configuration>
-                    <source>1.8</source>
-                    <target>1.8</target>
+                    <source>17</source>
+                    <target>17</target>
                 </configuration>
             </plugin>
 
-            <!-- BOM Squad executable jar -->
+            <!-- Runtime Analyst executable jar -->
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-shade-plugin</artifactId>
@@ -69,7 +74,7 @@
                         <configuration>
                             <transformers>
                                 <transformer implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">
-                                    <mainClass>com.contrastsecurity.bomsquad.Main</mainClass>
+                                    <mainClass>com.contrastsecurity.runtimeanalyst.Main</mainClass>
                                 </transformer>
                             </transformers>
                             <createDependencyReducedPom>false</createDependencyReducedPom>

src/main/java/com/contrastsecurity/bomsquad/AIAdvisor.java → src/main/java/com/contrastsecurity/runtimeanalyst/AIAdvisor.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.io.FileReader;
 import java.io.FileWriter;
@@ -27,7 +27,7 @@
  * level): for each app, describes what it appears to be, then lists how it uses AI.
  *
  * Usage:
- *   java -jar bom-squad.jar aibom-advisor aibom.json [-v] [-o report.md] [--json out.json] [--no-confirm]
+ *   java -jar runtime-analyst.jar aibom-advisor aibom.json [-v] [-o report.md] [--json out.json] [--no-confirm]
  */
 public class AIAdvisor {
 
@@ -114,7 +114,7 @@ public static void main(String[] args) {
             else if (a.equals("--json") && i + 1 < args.length) jsonOut = args[++i];
             else if (a.equals("--no-confirm")) noConfirm = true;
             else if (a.equals("-h") || a.equals("--help")) {
-                System.out.println("Usage: java -jar bom-squad.jar aibom-advisor <aibom.json> [-v] [-o report.md] [--json out.json] [--no-confirm]");
+                System.out.println("Usage: java -jar runtime-analyst.jar aibom-advisor <aibom.json> [-v] [-o report.md] [--json out.json] [--no-confirm]");
                 return;
             } else if (!a.startsWith("-")) {
                 aibomPath = a;

src/main/java/com/contrastsecurity/bomsquad/AIBOMGenerator.java → src/main/java/com/contrastsecurity/runtimeanalyst/AIBOMGenerator.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.io.File;
 import java.io.FileInputStream;
@@ -44,11 +44,11 @@
  * Generates a CycloneDX AI-BOM (AI/ML usage inventory) from Contrast API observations.
  *
  * Usage:
- *   java -jar bom-squad.jar aibom                # Fetch all apps, output aibom.json
- *   java -jar bom-squad.jar aibom --app "AppName" # Fetch single app
- *   java -jar bom-squad.jar aibom --list          # List available applications
- *   java -jar bom-squad.jar aibom -o custom.json  # Custom output filename
- *   java -jar bom-squad.jar aibom -c config.properties
+ *   java -jar runtime-analyst.jar aibom                # Fetch all apps, output aibom.json
+ *   java -jar runtime-analyst.jar aibom --app "AppName" # Fetch single app
+ *   java -jar runtime-analyst.jar aibom --list          # List available applications
+ *   java -jar runtime-analyst.jar aibom -o custom.json  # Custom output filename
+ *   java -jar runtime-analyst.jar aibom -c config.properties
  *
  * Config file (contrast.properties):
  *   contrast.url=https://your-instance.contrastsecurity.com/api/ns-ui/v1
@@ -175,15 +175,15 @@ public static void main(String[] args) {
     private static void printUsage() {
         System.out.println("\nAI-BOM Generator - Create CycloneDX AI-BOM from Contrast AI usage observations");
         System.out.println("\nUsage:");
-        System.out.println("  java -jar bom-squad.jar aibom                   Generate AI-BOM for all apps");
-        System.out.println("  java -jar bom-squad.jar aibom --app <id|name>   Filter by app (ID or name)");
-        System.out.println("  java -jar bom-squad.jar aibom --env <tier>      Filter by environment (PRODUCTION, DEVELOPMENT, QA)");
-        System.out.println("  java -jar bom-squad.jar aibom --list            List available applications with IDs");
-        System.out.println("  java -jar bom-squad.jar aibom --analyze         Run AI Advisor analysis after AI-BOM generation");
-        System.out.println("  java -jar bom-squad.jar aibom -o <file.json>    Specify output filename");
-        System.out.println("  java -jar bom-squad.jar aibom -c <config.properties>  Use custom config file");
+        System.out.println("  java -jar runtime-analyst.jar aibom                   Generate AI-BOM for all apps");
+        System.out.println("  java -jar runtime-analyst.jar aibom --app <id|name>   Filter by app (ID or name)");
+        System.out.println("  java -jar runtime-analyst.jar aibom --env <tier>      Filter by environment (PRODUCTION, DEVELOPMENT, QA)");
+        System.out.println("  java -jar runtime-analyst.jar aibom --list            List available applications with IDs");
+        System.out.println("  java -jar runtime-analyst.jar aibom --analyze         Run AI Advisor analysis after AI-BOM generation");
+        System.out.println("  java -jar runtime-analyst.jar aibom -o <file.json>    Specify output filename");
+        System.out.println("  java -jar runtime-analyst.jar aibom -c <config.properties>  Use custom config file");
         System.out.println("\nConfig file (contrast.properties):");
-        System.out.println("  contrast.url=https://eval.contrastsecurity.com/api/ns-ui/v1");
+        System.out.println("  contrast.url=https://your-instance.contrastsecurity.com/api/ns-ui/v1");
         System.out.println("  contrast.org_id=your-org-id");
         System.out.println("  contrast.auth_header=base64-encoded-credentials");
         System.out.println("  contrast.api_key=your-api-key");

src/main/java/com/contrastsecurity/bomsquad/AIUsageParser.java → src/main/java/com/contrastsecurity/runtimeanalyst/AIUsageParser.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;

src/main/java/com/contrastsecurity/bomsquad/AlgorithmParser.java → src/main/java/com/contrastsecurity/runtimeanalyst/AlgorithmParser.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.util.HashMap;
 import java.util.Map;

src/main/java/com/contrastsecurity/bomsquad/AppGraphInfo.java → src/main/java/com/contrastsecurity/runtimeanalyst/AppGraphInfo.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.util.HashSet;
 import java.util.Set;

src/main/java/com/contrastsecurity/bomsquad/ApplicationGraphFetcher.java → src/main/java/com/contrastsecurity/runtimeanalyst/ApplicationGraphFetcher.java

@@ -1,4 +1,4 @@
-package com.contrastsecurity.bomsquad;
+package com.contrastsecurity.runtimeanalyst;
 
 import java.io.IOException;
 import java.util.HashMap;