✨ Add go-licenses and cyclonedx-gomod to image ✨

Install go-licenses (dependency license scanner) and cyclonedx-gomod
(CycloneDX SBOM generator) via the go-tools build stage alongside the
other compiled tools.
- Dockerfile: add go install for go-licenses and cyclonedx-gomod in the go-tools stage
- README.md: add License & SBOM section to the included tools table

Dockerfile
README.md

Dockerfile

@@ -46,7 +46,9 @@ RUN GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install golang.org/x/tools/cmd/goim
     GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install github.com/google/wire/cmd/wire@latest && \
     GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install go.uber.org/mock/mockgen@latest && \
     GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install google.golang.org/protobuf/cmd/protoc-gen-go@latest && \
-    GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest
+    GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest && \
+    GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install github.com/google/go-licenses@latest && \
+    GOOS=${TARGETOS} GOARCH=${TARGETARCH} go install github.com/CycloneDX/cyclonedx-gomod/cmd/cyclonedx-gomod@latest
 
 FROM ${PULL_URL}:${DISTRO_VERSION} AS build
 ARG TZ

README.md

@@ -180,6 +180,13 @@ volumes:
 | `ko` | Build Go container images without a Dockerfile |
 | `air` | Live-reload dev server for iterative development |
 
+### License & SBOM
+
+| Tool | Purpose |
+|------|---------|
+| `go-licenses` | Scan all dependencies and report their licenses |
+| `cyclonedx-gomod` | Generate a CycloneDX SBOM from a Go module |
+
 ### Language server
 
 | Tool | Purpose |