chore(sbom): Align supported accesses/types with odg-core

[8R0WNI3]

What this PR does / why we need it:
For reference, see open-component-model/odg-core#906

Which issue(s) this PR fixes:
Fixes open-component-model/open-delivery-gear#205

Special notes for your reviewer:

Release note:

[coderabbitai]

📝 Walkthrough

Walkthrough

The SBOM download popover now validates access types and artefact types independently. It adds ociBlob/v1 access support and recognises additional artefact types, including ociArtifact/v1.

Changes

SBOM resource support validation

Layer / File(s)	Summary
Independent resource allowlists src/util/sbomDownloadPopover.js	Replaces access-type-specific compatibility mapping with separate allowlists. Supports ociBlob/v1, ociArtifact/v1, and the listed artefact types.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• open-component-model/odg-ui#453: Introduced the SBOM artefact support validation updated here.
• open-component-model/odg-ui#460: Updated the same SBOM resource-support allowlists.

Suggested reviewers: zkdev

Poem

A rabbit checks the types in line,
OCI treasures now align.
Blobs and artefacts pass the gate,
Tar and trees no longer wait.
Independent lists now hop,
SBOM downloads reach the top.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The change adds OCI-related types, but it does not demonstrate support for local index manifests, nested OCI artifacts, or general OCM v2 behavior required by [#205].	Add or document code changes that cover local untagged OCI artifacts, index-manifest references, nested OCI artifacts, and general OCM v2 handling.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: aligning supported SBOM accesses and types with odg-core.
Description check	✅ Passed	The description includes the change rationale, linked issue, reviewer notes section, and a valid release note classification.
Out of Scope Changes check	✅ Passed	The allowlist changes are directly related to aligning SBOM resource support with the linked OCM v2 objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@src/util/sbomDownloadPopover.js`:
- Around line 56-57: Update the unsupported-resource alert near the validation
using SUPPORTED_ACCESS_TYPES and SUPPORTED_ARTEFACT_TYPES so its message
mentions both unsupported access types and artefact types, rather than only
artefact access types.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 05114b02-c473-4e7c-854c-6359e93fe6c2

📥 Commits

Reviewing files that changed from the base of the PR and between 02584c2 and c417476.

📒 Files selected for processing (1)

• src/util/sbomDownloadPopover.js

[zkdev]

/lgtm