call generate_sbom in mkosi.finalize scripts

build-recipe-mkosi

@@ -93,6 +93,25 @@ recipe_build_mkosi() {
     if [ -n "$RELEASE" ]; then
         image_version="--image-version=${RELEASE}"
     fi
+    for format in $(queryconfig --dist "$BUILD_DIST" --configdir "$CONFIG_DIR" --archpath "$BUILD_ARCH" buildflags+ sbom | sort -u) ; do
+cat << EOF >> $BUILD_ROOT/$TOPDIR/SOURCES/mkosi.finalize
+#!/bin/bash
+# script generated by build-receipe-mkosi for sbom buildflags
+echo "Generating $format sbom file"
+imgname="image.${RELEASE}"
+/.build/generate_sbom \
+  --dist "$BUILD_DIST" \
+  --configdir "$CONFIG_DIR" \
+  --archpath "$BUILD_ARCH" \
+  --format "$format" \
+  --dir \$BUILDROOT  > "$TOPDIR/OTHER/\${imgname}${buildnum}.${format/cyclonedx/cdx}.json"
+pushd $TOPDIR/OTHER >/dev/null
+/usr/bin/sha256sum "\${imgname}${buildnum}.${format/cyclonedx/cdx}.json" > "\${imgname}${buildnum}.${format/cyclonedx/cdx}.json".sh256
+popd >/dev/null
+EOF
+chmod +x $BUILD_ROOT/$TOPDIR/SOURCES/mkosi.finalize
+     done
+
     set -- mkosi \
         --directory "$TOPDIR/SOURCES" \
         --default \