In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47408
Description
The manifest states that the Sbom-Location is META-INF/sbom/application.cdx.json but the SBOM's actual location is WEB-INF/classes/META-INF/sbom/application.cdx.json.
For reference, in the uber jar case both are META-INF/sbom/application.cdx.json.