main
tests: duplicate new spdxtool tests for bomtool
tests: add initial bomtool tests
tests: sbom: add tests covering requires.private
tests: add bomtool SOURCE_DATE_EPOCH tests