test: add unit tests for cve-diff and fallback for in-build sbom scans

.gitea/workflows/test.yaml

@@ -46,6 +46,10 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@v4
 
+    - name: Run JS Unit Tests
+      shell: bash
+      run: node --test
+
     - name: Test CVE Differential Action
       uses: ./
       with:
@@ -85,3 +89,15 @@ jobs:
           fi
         fi
         echo "✅ All assertions passed (including >= 3 CVEs verification)."
+
+    - name: Archive SBOMs and CVE Reports
+      if: always()
+      uses: actions/upload-artifact@v4
+      with:
+        name: sboms-and-reports-${{ matrix.image_set.name }}-inbuild-${{ matrix.use_inbuild_sbom }}
+        path: |
+          sboms/
+          cve-reports/
+          cve-delta.md
+          cve-summary.md
+        if-no-files-found: ignore