SBOM file extension

[lucacome]

Hello, we started using the SBOM generation option and I noticed the .sbom file extension.
I couldn't find anything on the web for this extension so I looked at the SPDX spec and saw that they suggest using .spdx.json as a file extension when generating a JSON SBOM, so I was wondering if this should be the default extension and not .sbom or what was the reasoning behind this.

Thanks!

[caarlos0]

I'm not sure what the reasoning was, but it's unlikely we'll change it unless its really needed... users can use the extension they want in the config...

[lucacome]

Yeah you're right it can always be customized, but I personally try to use the default as much as possible...and it might be a little bit confusing that the default format is spdx-json but with an extension that doesn't match it.

Also I guess I was just curious where .sbom came from and if my google-fu was just weak because I couldn't find anything with that extension 😅

[caarlos0]

I honestly don't know either... it was added in this pr #2648

maybe @wagoodman can weight in?