COR-1258: generate CycloneDX SBOMs alongside scan reports - #142

Open

juangaitanv wants to merge 6 commits into

mainfrom

Commits on Jul 30, 2026

COR-1258: generate CycloneDX SBOMs alongside scan reports
Test
committed
Address PR review: schema-valid SBOMs for unresolved, duplicate, and inherited-version deps
Test
committed
Move graphed-ecosystem policy next to scan_all
Test
committed
Maven: honor dependencyManagement and chained property resolution
Test
committed
Fix root-name collision in SBOM filter and Maven project-version resolution
Test
committed
Simplify: shared split_section helper, PackageId::root() comparison
Test
committed