Requires #64
Adds a SBOM to the generated tarball when exporting a runtime
This depends on anchore/syft, but silently doesn't happen if syft was not found installed on the host.
Requires #64
Adds a SBOM to the generated tarball when exporting a runtime
This depends on [anchore/syft](https://github.com/anchore/syft), but silently doesn't happen if syft was not found installed on the host.