CRAVEX-integration: Integration with SCA Tools: OWASP-depscan

[pombredanne]

Integrate and import depscan

[tdruez]

Implemented at #1825 (This PR adds support for importing SBOMs generated with OWASP dep-scan)

Changes:

• Add a unit test to ensure the OWASP dep-scan SBOM support
• Add a GitHub workflow that runs every week to ensure the OWASP dep-scan SBOM support (see below for details)

Workflow

Available at .github/workflows/sca-integration-depscan.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using OWASP dep-scan.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).