build-public may expose internal URLs in the component.externalReferences field

[cedricwritescode]

If company internal URLs are provided in a components externalReferences field inside an SBOM, they should get deleted once build-public is executed. This is especially the case when SBOMs are generated using Conan.

• "component": {
  "author": "ACME",
  "bom-ref": "pkg:conan/[email protected]",
  "copyright": "ACME 2024, all rights reserved",
  "description": "A test package",
  "externalReferences": [
  {
  "type": "website",
  "url": "https://internal.acme.com/some_internal_url"
  }
  ],
  "name": "testpackage",
  "type": "application",
  "version": "1.0.0"
  },