Scans SBOMs for vulnerabilities