[Feature] Provide the ability to pack a compliant SBOM

[JonDouglas]

NuGet Product(s) Involved

MSBuild.exe, dotnet.exe, NuGet SDK

The Elevator Pitch

Today tools exist that allow you to generate a compliant sbom based on drop path which are used for all sorts of scenarios. For the efforts outlined in #12497 we will need to support the ability to pack a SPDX compliant SBOM and additionally think of other formats as well such as CycloneDX.

Basically, the premise would be that you can pack any SBOM file in a common format such as json/xml and have respective NuGet APIs to retrieve these files for use by other tools.

• https://github.com/microsoft/sbom-tool/tree/main/samples
• https://github.com/CycloneDX/bom-examples/tree/master/SBOM

Additional Context and Details

No response