Please add anaconda / conda-forge support

[greyskyy]

For many science applications, python environments are added via conda, rather than directly from the pypi registry. Support for the defaults and conda-forge channels would greatly increase the applicability of the integrated software supply chain management to these applications.

Even the ability to translate a conda environment.yml file into a requirements.txt for python library translation would be an appreciated step forward.

[jhutchings1]

The dependency submission API allows you to scan your Conda dependencies. For the ones that came from pypi, we can send alerts, although we don't curate advisories for dependencies that are published directly to Conda. Here's a GitHub Action you can use to get some functionality: https://github.com/jhutchings1/conda-dependency-submission-action