To provide wider usage of the Temurin SBOM & CDXA generation clients, provide a python client package

[andrew-m-leonard]

The Temurin SBOM & CDXA utilities are currently only available as Java classes: https://github.com/adoptium/temurin-build/tree/master/cyclonedx-lib/src/temurin/sbom

Investigate the feasibility of converting them to be python3 classes?

I suspect we could use:

• https://github.com/CycloneDX/cyclonedx-python-lib
  • https://pypi.org/project/cyclonedx-python-lib/

[andrew-m-leonard]

@Lukisorisch And you might be interested in investigating this one

[Lukisorisch]

I think migrating these scripts to Python would be fairly easy, except for a few issues:

• The current cyclonedx-python-lib does not support CycloneDX 1.6 features yet. Because of that, our formulation part would not be supported out of the box. We would have to implement that manually.
• Because of the missing aforementioned features, we can't rely on the librarys API. We will be forced to change the raw XML trees/files manually for now, which can cause errors.
• Apart from that, type safety is obviously lower in Python than in Java.

I would suggest waiting for the full 1.6 support. We could still start implementing everything apart from the formulation part though.