Add sample proof bundle configurations and verification script

- Introduced sample proof bundle configuration files for testing, including `sample-proof-bundle-config.dsse.json`, `sample-proof-bundle.dsse.json`, and `sample-proof-bundle.json`.
- Implemented a verification script `test_verify_sample.sh` to validate proof bundles against specified schemas and catalogs.
- Updated existing proof bundle configurations with new metadata, including versioning, created timestamps, and justification details.
- Enhanced evidence entries with expiration dates and hashes for better integrity checks.
- Ensured all new configurations adhere to the defined schema for consistency and reliability in testing.

src/SbomService/StellaOps.SbomService/Program.cs

@@ -1,7 +1,10 @@
 using System.Globalization;
 using System.Diagnostics.Metrics;
 using Microsoft.AspNetCore.Mvc;
+using Microsoft.Extensions.Options;
+using MongoDB.Driver;
 using StellaOps.SbomService.Models;
+using StellaOps.SbomService.Options;
 using StellaOps.SbomService.Services;
 using StellaOps.SbomService.Observability;
 using StellaOps.SbomService.Repositories;
@@ -17,38 +20,72 @@ builder.Configuration
 builder.Services.AddOptions();
 builder.Services.AddLogging();
 
-// Register SBOM query services (file-backed fixtures when present; fallback to in-memory seeds).
-builder.Services.AddSingleton<IComponentLookupRepository>(sp =>
+var mongoSection = builder.Configuration.GetSection("SbomService:Mongo");
+builder.Services.Configure<SbomMongoOptions>(mongoSection);
+var mongoConnectionString = mongoSection.GetValue<string>("ConnectionString");
+var mongoConfigured = !string.IsNullOrWhiteSpace(mongoConnectionString);
+
+// Register SBOM query services (Mongo when configured; otherwise file-backed fixtures when present; fallback to in-memory seeds).
+if (mongoConfigured)
 {
-    var config = sp.GetRequiredService<IConfiguration>();
-    var env = sp.GetRequiredService<IHostEnvironment>();
-    var configured = config.GetValue<string>("SbomService:ComponentLookupPath");
-    if (!string.IsNullOrWhiteSpace(configured) && File.Exists(configured))
+    builder.Services.AddSingleton<IMongoClient>(sp =>
     {
-        return new FileComponentLookupRepository(configured!);
-    }
+        var options = sp.GetRequiredService<IOptions<SbomMongoOptions>>().Value;
+        var url = new MongoUrl(options.ConnectionString!);
+        var settings = MongoClientSettings.FromUrl(url);
+        settings.ServerSelectionTimeout = TimeSpan.FromSeconds(5);
+        settings.RetryWrites = false;
+        return new MongoClient(settings);
+    });
 
-    var candidate = FindFixture(env, "component_lookup.json");
-    return candidate is not null
-        ? new FileComponentLookupRepository(candidate)
-        : new InMemoryComponentLookupRepository();
-});
+    builder.Services.AddSingleton<IMongoDatabase>(sp =>
+    {
+        var options = sp.GetRequiredService<IOptions<SbomMongoOptions>>().Value;
+        var client = sp.GetRequiredService<IMongoClient>();
+        var url = new MongoUrl(options.ConnectionString!);
+        var databaseName = string.IsNullOrWhiteSpace(options.Database)
+            ? url.DatabaseName ?? "sbom_service"
+            : options.Database;
+        return client.GetDatabase(databaseName);
+    });
 
-builder.Services.AddSingleton<ICatalogRepository>(sp =>
+    builder.Services.AddSingleton<IComponentLookupRepository, MongoComponentLookupRepository>();
+    builder.Services.AddSingleton<ICatalogRepository, MongoCatalogRepository>();
+}
+else
 {
-    var config = sp.GetRequiredService<IConfiguration>();
-    var env = sp.GetRequiredService<IHostEnvironment>();
-    var configured = config.GetValue<string>("SbomService:CatalogPath");
-    if (!string.IsNullOrWhiteSpace(configured) && File.Exists(configured))
+    builder.Services.AddSingleton<IComponentLookupRepository>(sp =>
     {
-        return new FileCatalogRepository(configured!);
-    }
+        var config = sp.GetRequiredService<IConfiguration>();
+        var env = sp.GetRequiredService<IHostEnvironment>();
+        var configured = config.GetValue<string>("SbomService:ComponentLookupPath");
+        if (!string.IsNullOrWhiteSpace(configured) && File.Exists(configured))
+        {
+            return new FileComponentLookupRepository(configured!);
+        }
 
-    var candidate = FindFixture(env, "catalog.json");
-    return candidate is not null
-        ? new FileCatalogRepository(candidate)
-        : new InMemoryCatalogRepository();
-});
+        var candidate = FindFixture(env, "component_lookup.json");
+        return candidate is not null
+            ? new FileComponentLookupRepository(candidate)
+            : new InMemoryComponentLookupRepository();
+    });
+
+    builder.Services.AddSingleton<ICatalogRepository>(sp =>
+    {
+        var config = sp.GetRequiredService<IConfiguration>();
+        var env = sp.GetRequiredService<IHostEnvironment>();
+        var configured = config.GetValue<string>("SbomService:CatalogPath");
+        if (!string.IsNullOrWhiteSpace(configured) && File.Exists(configured))
+        {
+            return new FileCatalogRepository(configured!);
+        }
+
+        var candidate = FindFixture(env, "catalog.json");
+        return candidate is not null
+            ? new FileCatalogRepository(candidate)
+            : new InMemoryCatalogRepository();
+    });
+}
 builder.Services.AddSingleton<IClock, SystemClock>();
 builder.Services.AddSingleton<ISbomEventStore, InMemorySbomEventStore>();
 builder.Services.AddSingleton<ISbomEventPublisher>(sp => sp.GetRequiredService<ISbomEventStore>());