Tony made contributions to https://github.com/canonical/sbomber to allow it to work with local files instead of pulling the artifact to be scanned from the snap store. We should update our use of the workflow in this repo to take advantage of this. This is particularly useful for this project due to race conditions with publishing (though the current workflow avoids this problem), and allowing us to use the same code for the FIPS branch (since we don't need to pull a different artifact from the store, just use the local files on the branch).
Tony made contributions to https://github.com/canonical/sbomber to allow it to work with local files instead of pulling the artifact to be scanned from the snap store. We should update our use of the workflow in this repo to take advantage of this. This is particularly useful for this project due to race conditions with publishing (though the current workflow avoids this problem), and allowing us to use the same code for the FIPS branch (since we don't need to pull a different artifact from the store, just use the local files on the branch).