3 The SBOM generator script creates an spdx file in the root level.
4 When the artifacts are staged the file gets overwritten.
7 Create the spdx file as ${PROJECT}-sbom-${release_version}.spdx
8 and then copy the spdx file under the namespace ${group_id_path} dir.