Pin gomod version in go-sbom image in CI

Mateorequested to merge
pin-sbom-cyclonedx-gomod-version into main

What it does ?

Pin gomod version in go-sbom image in CI (cyclonedx-gomod@v1.10.0).

Why ?

To avoid later go-sbom ci failures when go version diverges too much.

cf. sylva-projects/sylva-core#3794

Merge request reports