Adds the `--reach-use-only-pregenerated-sboms` flag#138

Merged

Douglas (dacoburn) merged 7 commits intomainfrom

reach-use-only-pregenerated-sboms

Dec 10, 2025

Commits on Dec 10, 2025

add flag --reach-use-only-pregenerated-sboms to exclude non-CDX and SPDX files from a Tier 1 reachability scan
Martin Torp (mtorp)
committed
prepare for 2.2.44
Martin Torp (mtorp)
committed
ensure only CDX/SPDX manifests and the .socket.facts.json are included in the final scan
Martin Torp (mtorp)
committed
Moved the logic for find_sbom_files to find_files to avoid code duplication. Left the new function in place and just called find_files with the optional params
Douglas (dacoburn)
committed
Bumped minimum required SDK version with fix for no version in results
Douglas (dacoburn)
committed
bumped to fixed version of the SDK for no version in results
Douglas (dacoburn)
committed
Upgraded socketdev sdk in lock file
Douglas (dacoburn)
committed