feat(tools): add debsbom to the tool center

[deveaud-m]

See https://github.com/siemens/debsbom for all the details.

/cc @Urist-McGit @fmoessbauer

[jkowalleck]

Thank you for adding the tool.
I have some remarks

[jkowalleck]

AUTOR seams not right for an automated tool.

https://cyclonedx.github.io/tool-center/tool.html#tool_functions

AUTHOR - Tools that human authors can use to create CycloneDX BOMs.

Suggested change

"AUTHOR",

[deveaud-m]

Thanks @jkowalleck for providing a suggestion.

We were also stumbling over the AUTHOR function while reviewing the classification internally and are quite sure that it fits to the debsbom tool. This tool can be use in an automated fashion but also directly by developers in their manual workflow.

We compared the classification with the one from another tool provided by our colleague (since both tools are similar in their functions) to get a consistent picture, see https://github.com/CycloneDX/tool-center/blob/main/tools/capycli_clearing_automation_for_sw360.json.

Could you elaborate on the semantic of AUTHOR to help us review our classification (in both tools) accordingly?

[jkowalleck]

AUTHOR is specifically for manual SBOM authoring tools, i.e., tools a human uses to write/compose a CycloneDX BOM directly.
It does not mean “a human is somewhere in the loop.”
If the tool primarily generates an SBOM from evidence/source analysis (even if a human triggers or edits it), it should be classified as a generator-type workflow, not AUTHOR.

[deveaud-m]

Ok, that makes sense to me now.

I pushed another commit to remove the AUTHOR function for debsbom.

Thanks for the explanation and thanks again for the presentation yesterday!