ZOOKEEPER-4657: Publish SBOM artifacts (#1969)

Reviewed-by: Vinod Anandan <vinod@owasp.org>
Signed-off-by: Chris Nauroth <cnauroth@apache.org>

pom.xml

@@ -918,6 +918,11 @@
           <artifactId>maven-bundle-plugin</artifactId>
           <version>5.1.1</version>
         </plugin>
+        <plugin>
+          <groupId>org.cyclonedx</groupId>
+          <artifactId>cyclonedx-maven-plugin</artifactId>
+          <version>2.7.3</version>
+       </plugin>
       </plugins>
     </pluginManagement>
 
@@ -1188,6 +1193,18 @@
           </execution>
         </executions>
       </plugin>
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+        <executions>
+          <execution>
+            <goals>
+              <goal>makeBom</goal>
+            </goals>
+            <phase>package</phase>
+          </execution>
+        </executions>
+      </plugin>
     </plugins>
     <resources>
       <resource>