TC-2279 HasSBOM retrieve by package when SBOM relates to arfifact #231

Namespace: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured" rel="nofollow">trusted-content-tenant
PipelineRun: <a href="https://console.redhat.com/application-pipeline/ns/trusted-content-tenant/pipelinerun/guac-on-pull-request-lm8mj" rel="nofollow">guac-on-pull-request-lm8mj

Failed

Red Hat Konflux/guac-on-pull-request has failed.

Status	Duration	Name
✅ Succeeded	20 seconds	init
✅ Succeeded	13 seconds	clone-repository
✅ Succeeded	8 seconds	prefetch-dependencies
✅ Succeeded	4 minutes	build-container
✅ Succeeded	8 seconds	build-image-index
✅ Succeeded	31 seconds	ecosystem-cert-preflight-checks
✅ Succeeded	9 seconds	push-dockerfile
✅ Succeeded	1 minute	clamav-scan
✅ Succeeded	7 seconds	apply-tags
✅ Succeeded	49 seconds	build-source-image
✅ Succeeded	9 seconds	deprecated-base-image-check
✅ Succeeded	38 seconds	sast-snyk-check
✅ Succeeded	14 seconds	rpms-signature-scan
✅ Succeeded	33 seconds	clair-scan
✅ Succeeded	9 seconds	show-sbom