Cross-reference OpenChain CRA Compliance Checklist

Hello FOSSA maintainers,

We are reaching out around the OpenChain CRA Compliance Requirements & Checklist.

We would like to cross-reference relevant CRA, SBOM, SCA, and open source compliance resources so users can find community material that helps with CRA evidence planning. Given FOSSA CLI's role in dependency analysis, license compliance, vulnerability scanning, and SBOM-oriented workflows, would you be open to referencing the OpenChain CRA checklist from the relevant README or documentation, where it fits?

OpenChain CRA checklist:
https://github.com/OpenChain-Project/CRA-Compliance

Annex D external references/adoption section:
https://github.com/OpenChain-Project/CRA-Compliance/blob/main/ANNEX_D_EXTERNAL_REFERENCES_AND_ADOPTION.md

This is only a cross-reference request, not a legal endorsement or conformity assessment claim. If GitHub is not the right place for this, please point us to the best channel.

Thank you.

Review the repository README and documentation areas to find the section covering dependency analysis, compliance, vulnerabilities, or SBOM workflows. Compare the OpenChain CRA checklist and its Annex D references, then add an appropriately scoped cross-reference without implying legal endorsement. Done means the relevant documentation links to the checklist clearly and the documentation checks pass.

Written by the indexing model from the issue text.