Thomas Bechtold 3fc5194f77 feat(sbom): wire archive orchestrator into CreateSBOM pipeline ...

Integrate the archive extraction orchestrator into the SBOM creation
pipeline, enabling recursive archive cataloging when configured:

- Add Archive field to CreateSBOMConfig with WithArchiveConfig builder
- Add Exclusions field to CreateSBOMConfig with WithExclusions builder
  so user --exclude patterns also filter content inside extracted
  archives, not only the source filesystem
- Add setupArchiveOrchestration() that creates the orchestrator when
  MaxDepth > 0, runs the iterative extract loop, and returns the
  composite resolver with archive contents visible to all catalogers
- Include archive config in configuration audit trail
- Add CLI archive config section (max-depth, size/file limits,
  exclude-extensions) wired through Catalog.ToArchiveConfig()
- CLI Catalog.ToSBOMConfig threads cfg.Exclusions through
  WithExclusions so child resolvers respect them

When MaxDepth is 0 (default), behavior is unchanged. When > 0, archives
discovered during scanning are extracted and their contents made visible
to all catalogers via the CompositeResolver.

Signed-off-by: Thomas Bechtold <thomasbechtold@jpberlin.de>

2026-04-27 08:49:00 +02:00

..

cli

chore(deps): update tools to latest versions (#4630)

2026-03-09 12:17:09 -04:00

internal

feat(sbom): wire archive orchestrator into CreateSBOM pipeline

2026-04-27 08:49:00 +02:00

main.go

expose cobra command in cli package (#2097)

2023-09-05 14:33:38 +00:00