ToDo:
Add evergreen build task (should be triggered in the Build process) that upload generated SBOM to Kondukto using SilkBomb.
Only for the following branches:
master, v7.0, v8.0, v8.1, v8.2
Motivation:
Previously, SBOM in GitHub was being consumed by Black Duck and Kondukto pulled data from Black Duck via an integration. Now that Blackduck will be out of the picture, we need a mechanism for Kondutko to get SBOM updates that don't require manual uploading to Kondukto.
Definition of Done:
SBOM being visible and parsed by Kondukto so it can scan dependencies for vulnerabilities.