Create and distribute Software Bill-of-Materials (SBOM) for Python artifacts

Thank you for working on this. The overview looks really nice …

image

… but how can we add the probably most important OS to this scheme, which is Linux ?

Now, I know that we’re not responsible for the SBOMs of Linux distribution provider builds of Python, but since many PyPI wheels are built against the manylinux images, it would be useful to include SBOMs from those / for those images to the picture.

And perhaps even provide entry points for the SBOMs of the generated wheels themselves.