Fix SBOM generation

[divolgin]

Description, Motivation and Context

Please include a summary of the change or what problem it solves. Please also include relevant motivation and context.

SBOM generation failed during last release with this error

spdx-sbom-generator
./sbom/spdx-sbom-generator -o ./sbom/spdx
INFO[2026-08-17T18:49:38Z] Starting to generate SPDX ...                
INFO[2026-08-17T18:49:39Z] Running generator for Module Manager: `go-mod` with output `sbom/spdx/bom-go-mod.spdx` 
INFO[2026-08-17T18:49:39Z] Current Language Version go version go1.26.5 linux/amd64 
INFO[2026-08-17T18:49:51Z] Command completed successful for below package managers 
INFO[2026-08-17T18:49:51Z] Plugin go-mod generated output at sbom/spdx/bom-go-mod.spdx 
tar -czf sbom/assets/troubleshoot-sbom.tgz sbom/spdx/*.spdx
cosign sign-blob \
	--key ./cosign.key \
	--tlog-upload \
	--yes \
	--rekor-url=https://rekor.sigstore.dev/ \
	sbom/assets/troubleshoot-sbom.tgz > sbom/assets/troubleshoot-sbom.tgz.sig
Flag --tlog-upload has been deprecated, prefer using a --signing-config file with no transparency log services
Using payload from: sbom/assets/troubleshoot-sbom.tgz
Signing artifact...
Error: signing sbom/assets/troubleshoot-sbom.tgz: create bundle file: open : no such file or directory
error during command execution: signing sbom/assets/troubleshoot-sbom.tgz: create bundle file: open : no such file or directory
make: *** [Makefile:244: sbom] Error 1

Checklist

• New and existing tests pass locally with introduced changes.
• Tests for the changes have been added (for bug fixes / features)
• The commit message(s) are informative and highlight any breaking changes
• Any documentation required has been added/updated. For changes to https://troubleshoot.sh/ create a PR here

Does this PR introduce a breaking change?

• Yes
• No

[greptile-apps]

_{Reviews (1): Last reviewed commit: "Fix SBOM generation" | Re-trigger Greptile}