fix: place SBOM files closer to the application they are for

Author: dervoeti

airflow/Dockerfile

@@ -64,7 +64,7 @@ jq '.dependencies |= map(if .ref | test("^apache-airflow-providers-") then
     .dependsOn |= map(select(. != "apache-airflow==${PRODUCT}"))
 else
     .
-end)' /tmp/sbom.json > /stackable/airflow-${PRODUCT}.cdx.json
+end)' /tmp/sbom.json > /stackable/app/airflow-${PRODUCT}.cdx.json
 
 rm /tmp/sbom.json
 EOF

kafka/Dockerfile

@@ -102,7 +102,7 @@ COPY --chown=stackable:stackable kafka/licenses /licenses
 # We copy opa-authorizer.jar and jmx-exporter through the builder image to have an absolutely minimal final image
 # (e.g. we don't even need curl in it).
 COPY --chown=stackable:stackable --from=kafka-builder /stackable/kafka_${SCALA}-${PRODUCT} /stackable/kafka_${SCALA}-${PRODUCT}
-COPY --chown=stackable:stackable --from=kafka-builder /stackable/kafka_${SCALA}-${PRODUCT}.cdx.json /stackable/kafka_${SCALA}-${PRODUCT}.cdx.json
+COPY --chown=stackable:stackable --from=kafka-builder /stackable/kafka_${SCALA}-${PRODUCT}.cdx.json /stackable/kafka_${SCALA}-${PRODUCT}/kafka_${SCALA}-${PRODUCT}.cdx.json
 COPY --chown=stackable:stackable --from=kafka-builder /stackable/jmx/ /stackable/jmx/
 COPY --chown=stackable:stackable --from=kcat /stackable/kcat-${KCAT}/kcat /stackable/bin/kcat-${KCAT}
 COPY --chown=stackable:stackable --from=kcat /licenses /licenses