Ability to run vet on SBOM generated by github and give a single policy violation report

[jchauhan]

As a user, I want to perform a dependency scan on all/partial projects on GitHub org to generate the most critical risks such as license risks in one shot.

Optionally, I should be able to perform dependency scanning of selected projects in my orgs

The example command can be

vet scan https://github.com/OrgName --github-token ....

The scan should generate violations in a report

Possible behavior:
The tool can utilize the SBOM provided by Github to perform the assessment.