main
tests: convert sbom-related tests
tests: add regression test for malformed spdx expression handling