Contribution

• I'd be willing to implement this feature (contributing guide)

Describe the user story

I need SBOM's to implement SCA pipeline for repos managed by pnpm. Npm can generate them out of the box(link), but for pnpm all solutions looks a bit painful

Describe the solution you'd like

Add pnpm sbom command which works nearly like npm sbom.

Describe the drawbacks of your solution

No response

Describe alternatives you've considered

generating lock file by npm as discussed in #5926 seems to be a bad idea