tests: emulate execution of pdfbox-tools with cyclonedx-maven-plugin and depscan

[algomaster99]

pdfbox-app is an executable from https://github.com/apache/pdfbox. We try to execute its composite jar that is found in pdfbox-tools (as hinted from here).

Then I run the main class and add dependencies after seeing the error log and ensuring that the dependency is listed somewhere in pom, parent-pom, or poms of direct dependencies.

I used mvn org.cyclonedx:cyclonedx-maven-plugin:makePackageBom inside pdfbox/tools to create a BOM for only that module. However, cyclonedx maven plugin does not fetch any dependency for it even though there exists some.

[algomaster99]

Since the root component is not reported by depscan, our tool outputs that it is not present:

[NOT WHITELISTED]: org/apache/pdfbox/tools/PDFBox

depscan, although, mentions that this dependency exists under dependencies. See https://github.com/ASSERT-KTH/terminator/pull/69/files#diff-72de8ed0483e65162662aa3dbd7d49c4aed024e849ef1134fbf1fcc6161fa89aR592.

[algomaster99]

@MartinWitt have a look it. Interesting case.