Minor tutorial updates

[jspeed-meyers]

• Use go install, rather than go build
• Use the go executable in the final command

Related to @rnjudge's issues with the current tutorial in issue #14

[rnjudge]

I am only able to run sbom-scorecard tool using this go run command, even after running the go install command above.

rose@rose-vm:~/ternenv/sbom-scorecard$ go install cmd/sbom-scorecard/main.go
# bin directory properly created
rose@rose-vm:~/ternenv/sbom-scorecard$ ls ~/go/
bin/ pkg/

# try to run using sbom-scorecard command doesn't work
rose@rose-vm:~/ternenv/sbom-scorecard$ sbom-scorecard --help
sbom-scorecard: command not found

# using go run does
rose@rose-vm:~/ternenv/sbom-scorecard$ go run cmd/sbom-scorecard/main.go --help
sbom-scorecard evaluates the quality of the SBOM

Usage:
  sbom-scorecard [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  score       score evaluates the SBOM being passed and outputs based on the composition and completion

Flags:
  -h, --help   help for sbom-scorecard

[rnjudge]

Interesting, if I call sbom-scorecard with main instead of sbom-scorecard, it works....?

rose@rose-vm:~/ternenv/sbom-scorecard$ go install cmd/sbom-scorecard/main.go
rose@rose-vm:~/ternenv/sbom-scorecard$ sbom-scorecard
sbom-scorecard: command not found
rose@rose-vm:~/ternenv/sbom-scorecard$ main
sbom-scorecard evaluates the quality of the SBOM

Usage:
  sbom-scorecard [command]

Available Commands:
  completion  Generate the autocompletion script for the specified shell
  help        Help about any command
  score       score evaluates the SBOM being passed and outputs based on the composition and completion

Flags:
  -h, --help   help for sbom-scorecard

Use "sbom-scorecard [command] --help" for more information about a command.

[justinabrahms]

Good find. I'll fix up the docs and rearrange things so this works correctly.

[justinabrahms]

Tracked here: #21

[justinabrahms]

@rnjudge I'm guessing that the go/bin directory isn't on your path? Try:

export PATH=$PATH:$HOME/go/bin/

and see if it can find the sbom-scorecard binary then.

[rnjudge]

@justinabrahms go/bin is in my path. does this look right?

rose@rose-vm:~/ternenv/sbom-scorecard$ echo $PATH
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin:/usr/local/go/bin:/home/rose/go/bin

but still no luck with scorecard command

[justinabrahms]

@rnjudge Can you try this one?

go install github.com/ebay/sbom-scorecard/cmd/sbom-scorecard@latest

That should put an sbom-scorecard binary in the right spot.

(and yes, that path looks great)

[rnjudge]

@justinabrahms that did it -- Thank you! Suggest adding that to the tutorial :)