Support generation of a cyclonedx bom

(Lost my initial text :( )
Dependency Check finds dependencies of a project in a wider scope than [cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) as a sample. It not just checks the build file (pom.xml) but also the files in the workspace. So from my point of view it is better suited to create a bom of a project.

Would it be possible - with reasonable effort - to generate a [CycloneDX bom.xml](https://github.com/CycloneDX/specification) as a result file of the DependencyCheck? This would allow the use of DependencyCheck for detection of immediate vulnerabilities and the generation of the bom. [DependencyTrack](https://dependencytrack.org/) can then cover the long term scope, vulnerabilities found after build time and updates or retirements of used dependencies.