[CRAVEX] SCA Integrations: cyclonedx-gomod

[tdruez]

• Issue: CRAVEX-integration: Integration with SCA Tools: cyclonedx-gomod #1731

This PR adds support for importing SBOMs generated with [cyclonedx-gomod] (https://github.com/CycloneDX/cyclonedx-gomod).

Changes:

• Add a unit test to ensure the [cyclonedx-gomod] (https://github.com/CycloneDX/cyclonedx-gomod). SBOM support
• Add a GitHub workflow that runs every week to ensure the [cyclonedx-gomod] (https://github.com/CycloneDX/cyclonedx-gomod) SBOM support (see below for details)

Workflow

Available at .github/workflows/sca-integration-cyclonedx-gomod.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using cyclonedx-gomod.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).