---
prelude: >
  The SBOM generator script creates an spdx file in the root level.
  When the artifacts are staged the file gets overwritten.
fixes:
  - |
    Create the spdx file as ${PROJECT}-sbom-${release_version}.spdx
    and then copy the spdx file under the namespace ${group_id_path} dir.