From 97ea26a31d17550ece6a1902bfe3bc68082a968b Mon Sep 17 00:00:00 2001
From: Maxwell G <maxwell@gtmx.me>
Date: Wed, 21 Aug 2024 11:31:32 -0500
Subject: [PATCH] Add go-vendor-tools to sandcastle image

go-vendor-tools is a new tool maintained by the Fedora Go SIG which
helps with generating vendor archives and helping vendored Go packages
follow the Licensing Guidelines. It is currently only available in
Fedora, so we install it with pip.
---
 files/install-rpm-packages.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/files/install-rpm-packages.yaml b/files/install-rpm-packages.yaml
index f2c8745..e4960da 100644
--- a/files/install-rpm-packages.yaml
+++ b/files/install-rpm-packages.yaml
@@ -58,6 +58,9 @@
           - python3-hatch-vcs
           # for rust2rpm
           - python3.11-pip
+          # for go-vendor-tools
+          - trivy
+          - askalono-cli
         state: present
         install_weak_deps: False
       tags:
@@ -74,6 +77,11 @@
         executable: pip3.11
       tags:
         - basic-image
+    - name: Install go-vendor-tools that is not packaged for EL9.
+      ansible.builtin.pip:
+        name: go-vendor-tools
+      tags:
+        - basic-image
     - name: Install all RPM packages needed to hack on sandcastle.
       ansible.builtin.dnf:
         name: