[SBOM] only checksum jar files

Author: paulcacheux

pkg/util/trivy/trivy.go

@@ -104,6 +104,7 @@ func getDefaultArtifactOption(opts sbom.ScanOptions) artifact.Option {
 		Parallel:          parallel,
 		SBOMSources:       []string{},
 		DisabledHandlers:  DefaultDisabledHandlers(),
+		FileChecksumJar:   true,
 		WalkerOption: walker.Option{
 			ErrorCallback: func(_ string, err error) error {
 				if errors.Is(err, fs.ErrPermission) || errors.Is(err, fs.ErrNotExist) {
@@ -164,10 +165,6 @@ func getDefaultArtifactOption(opts sbom.ScanOptions) artifact.Option {
 		)
 	}
 
-	if slices.Contains(opts.Analyzers, LanguagesAnalyzers) {
-		option.FileChecksum = true
-	}
-
 	return option
 }