Have functionality to check a given SBOM for allowed licenses

[tngraf]

The idea is not to have a full license compliance check.
This should be just a quick check whether one of the licenses in the given SBOM
is not listed in a given whitelist.

[SUMITKC1]

Hi @tngraf,

I’d like to work on this issue and propose an approach to implement a quick SBOM license check against a whitelist.

Proposed Approach
✔ Parse the SBOM file to extract all associated licenses.
✔ Compare these licenses against a user-provided whitelist.
✔ Flag any licenses that are not in the whitelist and generate a simple report.
✔ Ensure the solution is lightweight and efficient, without performing a full compliance check.

Implementation Plan
1️⃣ Add functionality to read a whitelist file (e.g., allowed_licenses.txt).
2️⃣ Extract license information from the SBOM file.
3️⃣ Compare and identify disallowed licenses.
4️⃣ Provide a clear summary output, listing any violations.

Would this approach work? If so, I’d be happy to implement it and submit a PR. Let me know your thoughts! 🚀