Syft Directory Source: Git Tag and Metadata Information

[spiffcs]

What would you like to be added:
When syft runs a directory scan it should be able to intuition when it is in a git repository.

This would then lead for commit sha, tag and other git metadata to be amended to the source object of the SBOM.

Why is this needed:
This information can be carried forward into grype scanning and other templates/vulnerability reports to provide more accurate labeling and pinpointing of which version of a software project and SBOM was generated against.

Additional context:
Picking this issue up means editing the Source object and adding a specific Metadata surrounding the new git data points:

syft/syft/format/syftjson/model/source.go

Line 15 in 1c37bab

type Source struct {