open-horizon-services / service-sbom-policy-generator