feat: add dependency track integration

[takumakume]

ref #575

SBOM Report has been supported since Trivy Operator 0.15.0 .

I want to execute a webhook to Dependency Track via Postee. (ref: aquasecurity/trivy-operator#143 (comment) )

In this Pull Request, I implemented the following:

• Added Integration of Dependency Track
• Added Template for sending Trivy Operator sbomReport to Dependency Track

Dependency Track uploads the BOM with ProjectName and ProjectVersion as keys.

Dependency Track Integration has the following specification:

• ProjectName:ProjectVersion is the template title . (e.g. busybox:latest)
• BOM data is in the template description .

In this Pull Request, only JSON used by trivy-operator is supported as BOM format.

---

The operation was checked in the following environment.

• Dependency Track 4.8.0
• Trivy Operator 0.15.1 (ref: fix: sbomReport: wrong type of SpecVersion field trivy-operator#1378)

routes:
  - name: dependencytrack
    input: contains(input.kind, "SbomReport")
    actions: [ dependencytrack ]
    template: dependencytrack
actions:
  - name: my-dependencytrack
    type: dependencytrack
    enable: true
    url: http://192.168.100.28:8081/ # local docker compose
    dependency-track-api-key: **
templates:
  - name: dependencytrack
    rego-package: postee.trivyoperator.dependencytrack

• trivy-operator sends SBOM Report webhook to Postee and is registered in Dependency Track.
• Can be configured from Postee UI
  

[takumakume]

https://aquasecurity.slack.com/archives/C02NT2Y4FJL/p1691406606182759

Hi all, I would just quickly like to remind everyone that our efforts have shifted to Trivy and Tracee, you are still welcome to use Postee -- however, it is not actively being developed upon by the core team

Will this pull request be reviewed and merged?

[DmitriyLewen]

Hello @takumakume
Sorry for waiting!

I left some comments.

[takumakume]

@DmitriyLewen
Thanks for the check! I have push some fixes.

[DmitriyLewen]

Thanks for your work!
LGTM.
@simar7 can you take a look and merge PR?

[takumakume]

Hi, is there anything I can do to merge this pull request? Thank you for your time. @simar7