test: lock binary sbom references

Author: ebursztein

CHANGELOG.md

@@ -8,6 +8,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Fixed
+- Added a binary SBOM reference regression proving binary rows keep component
+  refs and do not repeat package SBOM file links.
 - Added a package SBOM owner-level regression proving SBOM links render once
   on the owning package page and not on each binary row.
 - Added a package detail navigation regression proving every manifest package

tests/test_release_package_binary_contract.py

@@ -204,6 +204,11 @@ def test_package_sbom_renders_once_at_owner_level() -> None:
     test_package_detail_sbom_once_binary_refs()
 
 
+def test_binary_rows_do_not_repeat_package_sbom_links() -> None:
+    test_package_sbom_not_repeated_per_binary()
+    test_package_detail_sbom_once_binary_refs()
+
+
 def test_binary_sbom_component_refs_resolve() -> None:
     graph = json.loads(FIXTURE_GRAPH.read_text(encoding="utf-8"))