fix(report): Refactor SBOM generation: split functions, improve PURL logic, set OS as root (#2171)

* separate func

* fix purl

* os as root component

* Update reporter/sbom/purl.go

Co-authored-by: MaineK00n <[email protected]>

* Update reporter/sbom/purl.go

Co-authored-by: MaineK00n <[email protected]>

* fix parsing java packages

* fix indent

* Update reporter/sbom/purl.go

Co-authored-by: MaineK00n <[email protected]>

* accept suggestions

* fix parse pkg name

* fix metadata.tools

---------

Co-authored-by: MaineK00n <[email protected]>

Author: kl-sinclair

reporter/localfile.go

@@ -94,7 +94,7 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {
 		}
 
 		if w.FormatCycloneDXJSON {
-			bs, err := sbom.GenerateCycloneDX(cyclonedx.BOMFileFormatJSON, r)
+			bs, err := sbom.SerializeCycloneDX(sbom.ToCycloneDX(r), cyclonedx.BOMFileFormatJSON)
 			if err != nil {
 				return xerrors.Errorf("Failed to generate CycloneDX JSON. err: %w", err)
 			}
@@ -105,7 +105,7 @@ func (w LocalFileWriter) Write(rs ...models.ScanResult) (err error) {
 		}
 
 		if w.FormatCycloneDXXML {
-			bs, err := sbom.GenerateCycloneDX(cyclonedx.BOMFileFormatXML, r)
+			bs, err := sbom.SerializeCycloneDX(sbom.ToCycloneDX(r), cyclonedx.BOMFileFormatXML)
 			if err != nil {
 				return xerrors.Errorf("Failed to generate CycloneDX XML. err: %w", err)
 			}