fix(sbom): add CycloneDX report

templates/gitlab-ci-maven.yml

@@ -501,6 +501,9 @@ mvn-sbom:
     when: always
     paths:
       - "${MAVEN_PROJECT_DIR}/target/mvn-sbom.cyclonedx.json"
+    reports:
+      cyclonedx: 
+        - "${MAVEN_PROJECT_DIR}/target/mvn-sbom.cyclonedx.json"
   rules:
     # exclude if disabled
     - if: '$MAVEN_SBOM_DISABLED == "true"'