diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 5f5555d..236a0c5 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -5,6 +5,8 @@ on:
     branches:
       - 'master'
       - 'test_consume_*'
+    tags:
+      - "**"
   pull_request:
     branches:
       - '**'
@@ -37,3 +39,9 @@ jobs:
       - name: Check dependencies
         run: dart run dependency_validator
         if: always() && steps.install.outcome == 'success'
+
+      - uses: anchore/sbom-action@v0
+        if: ${{ matrix.sdk == '2.19.6' && matrix.os == 'ubuntu' }}
+        with:
+          path: ./
+          format: cyclonedx-json
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
deleted file mode 100644
index 8fb0469..0000000
--- a/.github/workflows/publish.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-name: Publish to pub.dev
-
-on:
-  push:
-    tags:
-      # Releases
-      - '[0-9]+.[0-9]+.[0-9]+'
-      # Release Candidates
-      - '[0-9]+.[0-9]+.[0-9]+-rc[0-9]+'
-
-jobs:
-  publish:
-    permissions:
-      id-token: write # Required for authentication using OIDC
-    uses: dart-lang/setup-dart/.github/workflows/publish.yml@v1