Add SBOM to release payload (#351)

Author: davidmrdavid

MANIFEST.in

@@ -0,0 +1 @@
+include ./_manifest/*

azure-pipelines.yml

@@ -50,17 +50,16 @@ stages:
         pip install pytest pytest-azurepipelines
         pytest
       displayName: 'pytest'
-
-    - script: |
-        python setup.py sdist bdist_wheel
-      workingDirectory: $(baseFolder) 
-      displayName: 'Building'
     - task: ManifestGeneratorTask@0
       displayName: "SBOM Generation Task"
       inputs:
           BuildComponentPath: '$(baseFolder)'
-          BuildDropPath: dist
+          BuildDropPath: $(baseFolder)
           Verbosity: "Information"
+    - script: |
+        python setup.py sdist bdist_wheel
+      workingDirectory: $(baseFolder) 
+      displayName: 'Building'
     - task: PublishBuildArtifacts@1
       displayName: 'Publish Artifact: dist'
       inputs:

setup.py

@@ -4,8 +4,8 @@
 import shutil
 import subprocess
 import sys
-import glob
 
+from glob import glob
 from setuptools import setup, find_packages
 from distutils.command import build
 
@@ -65,6 +65,9 @@ def run(self, *args, **kwargs):
         'pytest-asyncio==0.10.0'
     ],
     include_package_data=True,
+    data_files= [
+        ('_manifest', list(filter(os.path.isfile, glob('_manifest/**/*', recursive=True)))),
+    ],
     cmdclass={
         'build': BuildModule
     },