Add cyclonedx shared examples
What does this MR do?
This MR adds shared examples to allow checking the contents of CycloneDX reports against expectations.
This MR depends on !15 (merged) and needs to be merged afterwards.
What are the relevant issue numbers?
Edited by Adam Cohen