Include the OS Information available in the SBOM model in the SPDX reports

[josegomezr]

Description

Include the OS Information available in the SBOM model in the SPDX reports

• Fixes OS information missing in SPDX format SBOM for a container image #3012

Type of change

• New feature (non-breaking change which adds functionality)

Checklist:

• I have added unit tests that cover changed behavior
• I have tested my code in common scenarios and confirmed there are no regressions
• I have added comments to my code, particularly in hard-to-understand sections

---

TODO:

• Understand the offset logic for {relationship,pkgCont}OffsetPerVersion

[popey]

Thanks for the PR @josegomezr !

I gave it a quick test here, and it looks good from a functional point of view. I'll leave others for code review.

$ grep ">" diff.txt
                                                              >     },
                                                              >     {
                                                              >       "name": "debian",
                                                              >       "SPDXID": "SPDXRef-OperatingSystem-debian",
                                                              >       "versionInfo": "12",
                                                              >       "supplier": "NOASSERTION",
                                                              >       "downloadLocation": "NOASSERTION",
                                                              >       "filesAnalyzed": false,
                                                              >       "licenseConcluded": "NOASSERTION",
                                                              >       "licenseDeclared": "NOASSERTION",
                                                              >       "description": "Debian GNU/Linux 12 (bookworm)",
                                                              >       "primaryPackagePurpose": "OPERATING-SYSTEM"
                                                              >       "relationshipType": "CONTAINS"
                                                              >     },
                                                              >     {
                                                              >       "spdxElementId": "SPDXRef-DocumentRoot-Image-nextcloud"
                                                              >       "relatedSpdxElement": "SPDXRef-OperatingSystem-debian",