CRAVEX-integration: Integration with SCA Tools: one select OWASP-CycloneDX scanner

[pombredanne]

Integrate and import cdxgen

[tdruez]

Implemented at #1824 (This PR adds support for importing SBOMs generated with CycloneDX cdxgen)

Changes:

• Add a unit test to ensure the https://cyclonedx.github.io/cdxgen/ SBOM support
• Add a GitHub workflow that runs every week to ensure the CycloneDX cdxgen SBOM support (see below for details)
• Add new "Can I import SBOM from other SCA tools?" section in the FAQ detailing the external SBOM support. https://scancodeio.readthedocs.io/en/latest/faq.html#can-i-import-sbom-from-other-sca-tools

Workflow

Available at .github/workflows/sca-integration-cdxgen.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using CycloneDX cdxgen.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).