fix: resolve main branch workflow failures

- Advanced Metrics: Install project dependencies before running tests
- SBOM Generation: Replace unsupported spdx-json format with json format
- Use uv run for all test commands to ensure proper environment

Author: fgogolli

.github/workflows/advanced-metrics.yml

@@ -47,14 +47,16 @@ jobs:
 
     - name: Install dependencies
       run: |
-        python -m pip install --upgrade pip
-        pip install coverage pytest cloc
+        # Install project with dependencies first
+        uv sync --frozen
+        # Install additional tools
+        uv pip install coverage pytest cloc
 
     - name: Run tests with coverage
       run: |
-        coverage run -m pytest tests/ --tb=short
-        coverage report --format=total > coverage.txt
-        coverage xml
+        uv run coverage run -m pytest tests/ --tb=short
+        uv run coverage report --format=total > coverage.txt
+        uv run coverage xml
 
     - name: Calculate lines of code
       run: |
@@ -88,7 +90,7 @@ jobs:
     - name: Run performance test
       run: |
         start_time=$(date +%s.%N)
-        python -m pytest tests/ -x --tb=no -q
+        uv run python -m pytest tests/ -x --tb=no -q
         end_time=$(date +%s.%N)
         
         # Calculate duration in seconds

makefiles/quality.mk

@@ -88,7 +88,7 @@ sbom-generate: dev-install ## Generate Software Bill of Materials (SBOM)
 	./dev-tools/scripts/install_dev_tools.py --tool pip-audit
 	@echo "Generating Python dependency SBOM..."
 	$(call run-tool,pip-audit,--format=cyclonedx-json --output=python-sbom-cyclonedx.json)
-	$(call run-tool,pip-audit,--format=spdx-json --output=python-sbom-spdx.json)
+	$(call run-tool,pip-audit,--format=json --output=python-sbom.json)
 	@echo "SBOM files generated successfully"
 
 security-report: security sbom-generate  ## Generate comprehensive security report