Possibly add ci-job comparing sboms using cyclonedx-cli
cyclonedx-cli [1] can compare two sboms. E.g.:
cyclonedx diff --component-versions --from-format=json --to-format=json <old_sbom> <new_sbom>
cyclonedx-cli [1] can compare two sboms. E.g.:
cyclonedx diff --component-versions --from-format=json --to-format=json <old_sbom> <new_sbom>