Automated cherry pick of #5110: add sbom to release assests

[zhzhuang-zju]

Cherry pick of #5110 on release-1.10.
#5110: add sbom to release assests
For details on the cherry pick process, see the cherry pick requests page.

[liangyuanpeng]

/lgtm

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 53.30%. Comparing base (ace2399) to head (7904b89).

❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@               Coverage Diff                @@
##           release-1.10    #5117      +/-   ##
================================================
- Coverage         53.30%   53.30%   -0.01%     
================================================
  Files               253      253              
  Lines             20572    20572              
================================================
- Hits              10966    10965       -1     
- Misses             8879     8880       +1     
  Partials            727      727              

Flag	Coverage Δ
unittests	53.30% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[RainbowMango]

/approve

[karmada-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: RainbowMango

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• .github/workflows/OWNERS [RainbowMango]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment