fix(build): include go package licenses in sbom fixes#2363

[kaysavps]

No description provided.

[kaysavps]

According to syft documentation, this setting gets the license info from the network using by default https://proxy.golang.org.

golang:     
    # search for go package licences by retrieving the package from a network proxy
    #  SYFT_GOLANG_SEARCH_REMOTE_LICENSES env var    
    search-remote-licenses: false     
    # remote proxy to use when retrieving go packages from the network, 
    # if unset this defaults to $GOPROXY followed by https://proxy.golang.org    
    # SYFT_GOLANG_PROXY env var    
    proxy: ""

[migmartri]

According to syft documentation, this setting gets the license info from the network using by default https://proxy.golang.org.

golang:     
    # search for go package licences by retrieving the package from a network proxy
    #  SYFT_GOLANG_SEARCH_REMOTE_LICENSES env var    
    search-remote-licenses: false     
    # remote proxy to use when retrieving go packages from the network, 
    # if unset this defaults to $GOPROXY followed by https://proxy.golang.org    
    # SYFT_GOLANG_PROXY env var    
    proxy: ""

thanks. It might be more useful to have a minor comment in the code itself.