Bom creation via CycloneDX requires golang v23

[sdischer-sap]

We recently started receiving errors like this in our pipelines:

12:03:15  info  golangBuild - running command: go install github.com/CycloneDX/cyclonedx-gomod/cmd/cyclonedx-gomod@latest
12:03:15  info  golangBuild - go: downloading github.com/CycloneDX/cyclonedx-gomod v1.8.0
12:03:15  info  golangBuild - go: github.com/CycloneDX/cyclonedx-gomod/cmd/cyclonedx-gomod@latest: github.com/CycloneDX/[email protected] requires go >= 1.23.1 (running go 1.22.7; GOTOOLCHAIN=local)

Is it expected that you can't use createBOM with golang lower then v23? We use a configuration like this:

golangBuild:
    createBOM: true
    dockerImage: &GOLANG_BUILDER 'golang:1.22'

Up until now that worked fine.

If thats the case the documentation might need an update: https://www.project-piper.io/steps/golangBuild/#createbom