add functional tests for spdx-tools-java (#54702)

This PR adds functional tests for `spdx-tools-java` which checks the
functionality of the binary on an SBOM

Signed-off-by: Rakshit Gondwal <rakshit.gondwal@chainguard.dev>

Author: rakshitgondwal

spdx-tools-java.yaml

@@ -1,7 +1,7 @@
 package:
   name: spdx-tools-java
   version: "2.0.1"
-  epoch: 2
+  epoch: 3
   description: SPDX Command Line Tools using the Spdx-Java-Library
   copyright:
     - license: Apache-2.0
@@ -60,9 +60,18 @@ update:
     strip-prefix: v
 
 test:
+  environment:
+    contents:
+      packages:
+        - syft
   pipeline:
     - runs: |
         tools-java Version
         tools-java /var/lib/db/sbom/*.json
         tools-java --version
         tools-java --help
+    - name: tests on sbom
+      runs: |
+        syft cgr.dev/chainguard/static:latest -o spdx-json > ./sbom-spdx.json
+        tools-java Verify ./sbom-spdx.json
+        tools-java Convert ./sbom-spdx.json sbom.spdx JSON TAG