fix: remove sbom of kernel modules

Fixes #770

Signed-off-by: Mateusz Urbanek <mateusz.urbanek@siderolabs.com>

dvb/cx23885/pkg.yaml

@@ -46,9 +46,6 @@ steps:
         cp -r /rootfs/ /extensions-validator-rootfs/rootfs
         cp /pkg/manifest.yaml /extensions-validator-rootfs/manifest.yaml
         /extensions-validator validate --rootfs=/extensions-validator-rootfs --pkg-name="${PKG_NAME}"
-    sbom:
-      outputPath: /rootfs/usr/local/share/spdx/cx23885.spdx.json
-      version: {{ .LINUX_DVB_FIRMWARE }}
     # {{ end }} This in fact is YAML comment, but Go templating instruction is evaluated by bldr
 finalize:
   - from: /rootfs

dvb/dvb-m88ds3103/pkg.yaml

@@ -33,9 +33,6 @@ steps:
         cp -r /rootfs/ /extensions-validator-rootfs/rootfs
         cp /pkg/manifest.yaml /extensions-validator-rootfs/manifest.yaml
         /extensions-validator validate --rootfs=/extensions-validator-rootfs --pkg-name="${PKG_NAME}"
-    sbom:
-      outputPath: /rootfs/usr/local/share/spdx/dvb-m88ds3103.spdx.json
-      version: {{ .VERSION }}
 finalize:
   - from: /rootfs
     to: /rootfs

guest-agents/qemu-guest-agent/pcre2/pkg.yaml

@@ -27,7 +27,7 @@ steps:
       outputPath: /rootfs/usr/local/share/spdx/pcre2.spdx.json
       version: {{ .PCRE2_VERSION }}
       cpes:
-        - cpe:2.3:a:pcre:pcre2:{{ .CONTAINER_TOOLKIT_VERSION }}:*:*:*:*:*:*:*
+        - cpe:2.3:a:pcre:pcre2:{{ .PCRE2_VERSION }}:*:*:*:*:*:*:*
       licenses:
         - BSD-2-Clause
 finalize:

storage/zfs/zfs-tools/pkg.yaml

@@ -40,13 +40,6 @@ steps:
         # since talos doesn't have a shell, this would fail
         # the default shipped file is a no-op, so safe to remove.
         rm -f /rootfs/usr/local/libexec/zfs/zfs_prepare_disk
-    sbom:
-      outputPath: /rootfs/usr/local/share/spdx/zfs-tools.spdx.json
-      version: {{ .ZFS_DRIVER_VERSION }}
-      cpes:
-        - cpe:2.3:a:openzfs:openzfs:{{ .ZFS_DRIVER_VERSION }}:*:*:*:*:*:*:*
-      licenses:
-        - CDDL-1.0
 finalize:
   - from: /rootfs
     to: /rootfs