diff --git a/.github/actions/test/action.yml b/.github/actions/test/action.yml
index 69d7b5a57a..c1a69e3913 100644
--- a/.github/actions/test/action.yml
+++ b/.github/actions/test/action.yml
@@ -69,6 +69,11 @@ runs:
         # https://www.electronjs.org/docs/latest/api/environment-variables
         ELECTRON_NO_ATTACH_CONSOLE: 'true'
 
+    - name: Create SBOM with CycloneDX
+      uses: CycloneDX/gh-node-module-generatebom@v1
+      with:
+        output: ${{ runner.temp }}/sbom.xml
+
     - name: Compress custom source
       if: runner.os != 'Windows'
       shell: bash