SBOM Scanning, Code Analysis and more..

[abhisek]

We got a bunch of contributions from @jchauhan most notably

• Scan CyloneDX SBOM
• JSON report generator

But the biggest mover has been adoption of code scanning capabilities. While this is an early stage of vet adopting code scanning (AST analysis) primarily for parsing setup.py sources for dependency declaration, this contribution will kick-start our ability to perform better analysis & provide more actionable remediation through code scanning.