Carlos Tadeu Panato Junior

> Why test-infra and not a subproject-specific GCP project? good question to @ameukam

I completely lost track of this, sorry I think this PR is only to change the deprecated image; if other things need to be done to push this repo to...

@thockin we will need to override the failing checks to get this merged. also what is the best slack channel to talk with you about next steps for this repo?

this is something we can skip to get this PR merged? cc @thockin @youngnick @robscott

/remove-lifecycle stale

hum looks like it is doing working well with the .tar.gz, i think that is better only with the binary, i can change that

seems we need to pass some config options run locally (with the correct version now) ``` syft scan otelcol-contrib_0.98.0_darwin_amd64.tar.gz -o spdx-json ✔ Indexed file system /private/var/folders/kl/q9mydw095ln5s7wj971qcrx40000gn/T/syft-archive-contents-177865781 ✔ Cataloged contents f2d873bf5f6127ce965934c5ee10665f83195ae3264690a496e63b895f996567...

i run the gorelease locally and the sboms was created with data

we need to make sure we have the latest syft, checking that

~seems ok~ was able to reproduce the issue with `syft v1.1.0` with `v1.1.1` was ok