Resolve "sbom 413"

Presentation

Fixes #111 (closed)

Checklist

• Documented:
  • README.md reflects any job, variable or whichever visible change
  • kicker.json reflects any job, variable or whichever visible change
• Tested & examplified:
  • (url to a project sample successfully proving the merge request fixes the issue)

Tested with:

• syft 1.20 without this fix
• syft 1.20 with fix (sbom is 2X lower size than without fix)
• syft 1.19 with fix to check backward compatibility