[FEATURE]: Add a proper way to represent VCS tags

[taleodor]

Describe the feature

Currently, there is no good way to represent version control tags.

Possible solutions

Suggestion is to add a new optional field with list of tags to the pedigree -> commits -> commit object.

Alternatives

It could be considered to add tags alongside commits, but then it won't be possible to represent tags pointing to a specific commit.

[jkowalleck]

Tank you for opening the discussion.

Currently, there is no good way to represent version control tags.

what are "version control tags" anyway? is it not just a "name" to a VCS node (commit)?

where in the CycloneDX data model would you think the data about a VCS tag should be?