Invalid CycloneDX JSON generated for specific images like "eclipse-temurin:17-jre-alpine"

[Parisha7]

What happened:
We had observed an error when trying to attest an SBOM file containing an image "eclipse-temurin:17-jre-alpine" while upgrading from syft version 0.80.0 to 0.81.0.
However, later after investigation, we found out that the generated SBOM file was at fault as one section containing "libretls" dependency did not contains any licenses, as the licenses coming were empty. If we would delete the empty licenses in the SBOM manually, then it would work fine.
Snippet for the same section is attached in the last.
Using cyclonedx-cli 0.24.0, I found out that it was invalid.

Unfortunately the tool does not give any more information that what was wrong in the SBOM file.

Unable to validate against any JSON schemas.
BOM is not valid.

What you expected to happen:
I would have expected the SBOM to be valid, no matter the input image.
We generate SBOMs on a large scale with Syft, and this is the only problem we have encountered with one so far.

Steps to reproduce the issue:
Generate the SBOM using below command and validate using cyclonedx-cli.

 syft -q eclipse-temurin:17-jre-alpine -o cyclonedx-json --file alpine_sbom14.json
 
 .\cyclonedx-win-x86.exe validate --input-file .\alpine_sbom14.json

Anything else we need to know?:
Unfortunately, I must not share the broken SBOM file with the outside world.

I look forward to your answers!

Environment:

• Output of syft version: 0.81.0
• OS (e.g: cat /etc/os-release or similar): Linux

{
		"bom-ref": "pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.18.0&package-id=71a549b8c070ffb2",
		"type": "library",
		"publisher": "AriadneConill<[email protected]>",
		"name": "libretls",
		"version": "3.7.0-r1",
		"description": "portoflibtlsfromlibressltoopenssl",
		"licenses": [{}],
		"cpe": "cpe:2.3:a:libretls:libretls:3.7.0-r1:*:*:*:*:*:*:*",
		"purl": "pkg:apk/alpine/[email protected]?arch=x86_64&distro=alpine-3.18.0",
		"externalReferences": [{
			"url": "https://git.causal.agency/libretls/",
			"type": "distribution"
		}]
	}