When trivy sbom (the import functionality) processes a valid CycloneDX SBOM whose Metadata component uses…

When trivy sbom (the import functionality) processes a valid CycloneDX SBOM whose Metadata component uses…: a task in LegoFlow-SWE (Harbor dataset). Steps to reproduce: 1. Create a minimal sbom.json where metadata.component.type is file (other fields can be valid CycloneDX). 2. Run trivy sbom…