Add uv package manager support

[clemlesne]

Relates advanced-security/component-detection-dependency-submission-action#85.

[cataggar]

We have several projects using uv internally. We generate the requirements.txt files so that they can be scanned, but it would be great if we didn't need that. Supporting the uv.lock files would be awesome.

[Dilski]

Hi, just checking if this has been implemented now?
I can see your PR that has been merged, but documentation hasn't been updated here (or in downstream projects) that they support uv.

[cataggar]

Yes, it has been working well for 2 months now internally. It still requires an environment variable set to turn it on. In my DevOps projects, I set:

  - name: EnableDetectorUvLock
    value: true

[cataggar]

This was fixed by #1425 and ca be closed. #1469 promoted it to Experimental.