Add PDM parser (#4234)

Signed-off-by: Pavel Buchart <pavel@buchart.cz>
Signed-off-by: Keith Zantow <kzantow@gmail.com>
Co-authored-by: Keith Zantow <kzantow@gmail.com>

schema/json/schema-latest.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "anchore.io/schema/syft/json/16.0.40/document",
+  "$id": "anchore.io/schema/syft/json/16.0.41/document",
   "$ref": "#/$defs/Document",
   "$defs": {
     "AlpmDbEntry": {
@@ -2549,6 +2549,9 @@
             {
               "$ref": "#/$defs/PythonPackage"
             },
+            {
+              "$ref": "#/$defs/PythonPdmLockEntry"
+            },
             {
               "$ref": "#/$defs/PythonPipRequirementsEntry"
             },
@@ -3131,6 +3134,35 @@
       ],
       "description": "PythonPackage represents all captured data for a python egg or wheel package (specifically as outlined in the PyPA core metadata specification https://packaging.python.org/en/latest/specifications/core-metadata/)."
     },
+    "PythonPdmLockEntry": {
+      "properties": {
+        "summary": {
+          "type": "string",
+          "description": "Summary provides a description of the package"
+        },
+        "files": {
+          "items": {
+            "$ref": "#/$defs/PythonFileRecord"
+          },
+          "type": "array",
+          "description": "Files are the package files with their paths and hash digests"
+        },
+        "dependencies": {
+          "items": {
+            "type": "string"
+          },
+          "type": "array",
+          "description": "Dependencies are the dependency specifications, without environment qualifiers"
+        }
+      },
+      "type": "object",
+      "required": [
+        "summary",
+        "files",
+        "dependencies"
+      ],
+      "description": "PythonPdmLockEntry represents a single package entry within a pdm.lock file."
+    },
     "PythonPipRequirementsEntry": {
       "properties": {
         "name": {