fix: add SBOMs for pigz/igzip

I forgot to add them in the previous PR.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>

Author: smira

Pkgfile

@@ -5,7 +5,7 @@ format: v1alpha2
 vars:
   TOOLCHAIN_MUSL_IMAGE: ghcr.io/siderolabs/toolchain-musl:v1.13.0-alpha.0-2-g0823283
   TOOLS_PREFIX: ghcr.io/siderolabs/
-  TOOLS_REV: v1.13.0-alpha.0-5-g543a16f
+  TOOLS_REV: v1.13.0-alpha.0-6-g896f8b9
 
   # renovate: datasource=github-releases depName=containernetworking/plugins
   cni_version: v1.9.0

igzip/pkg.yaml

@@ -41,6 +41,13 @@ steps:
         /rootfs/usr/bin/igzip --version
       - |
         fhs-validator /rootfs
+    sbom:
+      outputPath: /rootfs/usr/share/spdx/igzip.spdx.json
+      version: {{ .igzip_version }}
+      cpes:
+        - cpe:2.3:a:intel:isa-l:{{ .igzip_version }}:*:*:*:*:*:*:*
+      licenses:
+        - BSD-3-Clause
 finalize:
   - from: /rootfs
     to: /

pigz/pkg.yaml

@@ -28,6 +28,13 @@ steps:
         /rootfs/usr/bin/pigz --version
       - |
         fhs-validator /rootfs
+    sbom:
+      outputPath: /rootfs/usr/share/spdx/pigz.spdx.json
+      version: {{ .pigz_version }}
+      cpes:
+        - cpe:2.3:a:zlib:pigz:{{ .pigz_version }}:*:*:*:*:*:*:*
+      licenses:
+        - Zlib
 finalize:
   - from: /rootfs
     to: /