Add GHA running manufacturing.sh

[mdavidsaver]

Sets up environment, runs script, and does a cursory check that $PWD does not appear in the output.

[ldoolitt]

I like it!
I'm not an expert on GitHub Actions. I do see the log messages over at mdavidsaver. The zip-in-zip construction seems a bit odd.
I'm happy with the conversion to pip install kibom==1.9.1. As part of that, it looks like the message "KiBoM not found in \$PYTHONPATH" should be updated to "kibom not found in \$PATH".
It starts with runs-on: ubuntu-latest; are there not any Debian options? Oh, that's only the docker host, and the docker image is set to debian:12? OK, then.
In manufacturing.sh, can you sneak in an update to tested on Debian Bullseye 2024-03-20?

[mdavidsaver]

tested on Debian Bullseye 2024-03-20

GHA will start building BerkeleyLab/Marble once a configuration appears on the default branch.

The zip-in-zip construction seems a bit odd.

This is a quirk of actions/upload-artifact.

should be updated to "kibom not found in \$PATH".

I was inconsistent. The entry point I use is python3 -m kibom which should work in all contexts (git clone, pypi install, ...)

the docker image is set to debian:12?

Correct. So the "host" image version should not matter.

can you sneak in an update to tested on Debian Bullseye 2024-03-20?

Done.