create SBOM

[sallyom]

I'd like to add a make target to create a Software Bill of Materials, using similar to https://github.com/anchore/syft tool, run w/ CI workflow

[cooktheryan]

@sallyom any thoughts on https://github.blog/2022-07-01-extend-your-dependency-information-in-the-github-dependency-graph-with-new-github-actions/#Aqua%20trivy

[cooktheryan]

@sallyom first swag https://github.com/containers/fetchit/runs/8256553590?check_suite_focus=true