Run sbom_generator as sudo

Also, remove dump_repo_metadata role

Author: javihernandez

.github/actions/shared-steps/action.yml

@@ -516,10 +516,8 @@ runs:
     - name: Generate SBOM
       shell: bash
       run: |
-        . ./.venv-sbom/bin/activate
         echo "Generating SBOM document of ${{ env.IMAGE_FILE }}"
-        python3 sbom-tools/sbom_generator.py "${{ env.IMAGE_NAME }}" "${{ env.IMAGE_FILE }}.sbom-data.json" "${{ env.IMAGE_FILE }}.sbom.spdx.json"
-        done
+        sudo .venv-sbom/bin/python3 sbom-tools/sbom_generator.py "${{ env.IMAGE_NAME }}" "${{ env.IMAGE_FILE }}.sbom-data.json" "${{ env.IMAGE_FILE }}.sbom.spdx.json"
 
     # - name: Setup tmate session
     #   uses: mxschmitt/action-tmate@v3
@@ -616,7 +614,7 @@ runs:
         path: ${{ env.IMAGE_FILE }}
 
     - uses: actions/upload-artifact@v4
-      name: Store repo metadata as artifact
+      name: Store collected sbom data as artifact
       id: sbom-data-artifact
       if: inputs.store_as_artifact == 'true'
       with:

ansible/roles/cleanup_vm/tasks/main.yml

@@ -10,10 +10,6 @@
     name: sbom_data
   when: collect_sbom_data | bool
 
-- name: Include repo metadata dump role (for SBOMs)
-  include_role:
-    name: dump_repo_metadata
-
 - name: Find persistent net rules
   ansible.builtin.find:
     paths: /etc/udev/rules.d