design-needed: Comprehensive pipeline with reports

Form a chat with @daniel-eder

> In fact it may be very interesting to create components in the pipeline that produce such output, such as SBOMS, lists of Todos and Dont's, a full "compliance" file including all copyrights, licenses, notices, disclaimers, etc as required by each license, each step handling one specific type of output