feat(ISV-6032): verify URLs of released SBOMs

[jedinym]

The rh-advisories pipeline now also attaches SBOM artifacts to Release.Status.Artifacts. In the E2E tests we parse them and verify that the Atlas URLs of the SBOMs are valid.

Tested by running the E2E tests from the release-service-catalog side: konflux-ci/release-service-catalog#1294

---

https://issues.redhat.com/browse/ISV-6032

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign davidmogar for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• tests/release/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jedinym]

/ok-to-test

[jedinym]

/retest

[jedinym]

/retest

[konflux-ci-qe-bot]

@jedinym: The following test has Failed, say /retest to rerun failed tests.

PipelineRun Name	Status	Rerun command	Build Log	Test Log
konflux-e2e-sprvc	Failed	/retest	View Pipeline Log	View Test Logs

Inspecting Test Artifacts

To inspect your test artifacts, follow these steps:

1. Install ORAS (see the ORAS installation guide).
2. Download artifacts with the following commands:

mkdir -p oras-artifacts
cd oras-artifacts
oras pull quay.io/konflux-test-storage/konflux-team/e2e-tests:konflux-e2e-sprvc

Test results analysis

🚨 Error occurred while running the E2E tests, list of failed Spec(s):

➡️ [failed] [It] [release-pipelines-suite e2e tests for rh-advisories pipeline] Rh-advisories happy path Post-release verification verifies that Atlas SBOM URLs in Release artifacts are valid [release-pipelines, rh-advisories, rhAdvisories]

Click to view logs

Expected
    <[]string | len:0, cap:0>: nil
to have length 1

---