fix: ecosystems validate external references urls (#97)

* fix: ecosystems validate urls

* fix: rename arg to ref and use url pkg name

lib/ecosystems/enrich_cyclonedx.go

@@ -17,6 +17,7 @@
 package ecosystems
 
 import (
+	"net/url"
 	"strings"
 	"time"
 
@@ -65,12 +66,15 @@ func enrichCDXLicense(comp *cdx.Component, data *packages.Version) {
 	}
 }
 
-func enrichExternalReference(comp *cdx.Component, url *string, refType cdx.ExternalReferenceType) {
-	if url == nil {
+func enrichExternalReference(comp *cdx.Component, ref *string, refType cdx.ExternalReferenceType) {
+	if ref == nil {
+		return
+	}
+	if _, err := url.Parse(*ref); err != nil {
 		return
 	}
 	ext := cdx.ExternalReference{
-		URL:  *url,
+		URL:  *ref,
 		Type: refType,
 	}
 	if comp.ExternalReferences == nil {