yarn: SBOM components #739

Namespace: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured" rel="nofollow">tekton-ci
PipelineRun: <a href="https://console.redhat.com/application-pipeline/ns/tekton-ci/pipelinerun/cachi2-on-pull-request-tbn29" rel="nofollow">cachi2-on-pull-request-tbn29

Success

Red Hat Konflux/cachi2-on-pull-request has successfully validated your commit.

Status	Duration	Name
✅ Succeeded	6 seconds	init
✅ Succeeded	15 seconds	clone-repository
✅ Succeeded	5 minutes	build-container
✅ Succeeded	8 seconds	build-image-index
✅ Succeeded	36 seconds	clair-scan
✅ Succeeded	1 minute	ecosystem-cert-preflight-checks
✅ Succeeded	14 seconds	deprecated-base-image-check
✅ Succeeded	17 seconds	coverity-availability-check
✅ Succeeded	35 seconds	sast-snyk-check
✅ Succeeded	4 minutes	clamav-scan
✅ Succeeded	20 seconds	sast-shell-check
✅ Succeeded	20 seconds	push-dockerfile
✅ Succeeded	20 seconds	rpms-signature-scan
✅ Succeeded	12 seconds	apply-tags
✅ Succeeded	21 seconds	sast-unicode-check
✅ Succeeded	9 seconds	show-summary
✅ Succeeded	10 seconds	show-sbom