Generate SBOMs

As well as having access to parse them, we could also generate them as we have a lot of information around how a project is composed