[CRAVEX] SCA Integrations: OSV-Scanner

[tdruez]

• CRAVEX-integration: Integration with SCA Tools: OSV scanner #1730

This PR adds support for importing SBOMs generated with OSV-Scanner.

Changes:

• Add two unit tests to ensure the OSV-Scanner SBOM support: CycloneDX and SPDX output types.
• Add a GitHub workflow that runs every week to ensure the OSV-Scanner SBOM support (see below for details)

Workflow

Available at .github/workflows/sca-integration-osv-scanner.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using OSV-Scanner.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.