Adds in merge tool

.github/workflows/phase_1_python.yml

@@ -73,10 +73,30 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      # Should probably pin this dependency
+      - name: "Install sbommerge"
+        working-directory: "Phase 1/Python"
+        run: |
+          python -m pip install sbommerge
+
       - name: Download all workflow run artifacts
         uses: actions/download-artifact@v4
 
-      # TODO: Merge SBOMS
+      - name: "CycloneDX: Generate Merged SBOM"
+        working-directory: "Phase 1/Python"
+        run: |
+          sbommerge \
+            --format json \
+            --sbom cyclonedx \
+            -output-file flattened-cyclonedx.json \
+            container-sbom_cyclonedx.json \
+            application-sbom_cyclonedx.json
+
+      - name: Upload Combined CycloneDX SBOM
+        uses: actions/upload-artifact@v3
+        with:
+          name: application-sbom-cyclonedx
+          path: "Phase 1/Python/flattened-cyclonedx.json"
 
   Validate:
     needs: Assemble