Components: Update logic to set evidence.location similarly to current properties.srcfile

[setchy]

Update cdxgen to populate evidence.location like it does today for properties SrcFile

[hoggmania]

I did note in https://cyclonedx.org/guides/OWASP_CycloneDX-Authoritative-Guide-to-SBOM-en.pdf page 66 its should also have the relative path: -

"components": [
    {
      "type": "library",
      "name": "acme-persistence",
      "version": "1.0.0",
      "evidence": {
           "occurrences": [
               {
                    "bom-ref": "d6bf237e-4e11-4713-9f62-56d18d5e2079",
                    "location": "/path/to/component"
               }
            ]
       }
    }
]

[prabhu]

We also populate evidence.identity.*.value.

[prabhu]

@hoggmania changing paths to relative is a non-trivial work at this point.

[hoggmania]

How can we help :-)

Give us some pointers and I'll speak with Nicklas and Spyros on how we facilitate.

[prabhu]

#1652