https://www.andrewhoog.com/posts/how-to-generate-an-android-sbom-per-build-with-github-actions/