CRAVEX-integration: Integration with SCA Tools: ORT

[pombredanne]

Integrate and import and export ORT results.

There are a couple things to consider:

1. Formats to use and parse out of ORT for import into ScanCode
2. Formats to create and generate from ScanCode for export into ORT

For 2. there are various input: SBOM, analyzer and package list:

@tsteenbe told me:

This is the ORT package list format for importing things ORT doesn't support see https://github.com/oss-review-toolkit/ort/blob/main/cli-helper/src/funTest/resources/package-list.yml

[heliocastro]

The reference is SADL base image to start:
https://hub.docker.com/u/osadl