Remove .slsa-goreleaser.yml configuration file and update Gitea build workflow to include SPDX SBOM generation and additional artifact uploads.

.gitea/workflows/build.yml

@@ -63,11 +63,22 @@ jobs:
         version: v1
         args: mod -licenses -json -output bom.json
 
+    - name: Generate SPDX SBOM with Trivy
+      uses: https://git.quad4.io/actions/trivy-action@22438a435773de8c97dc0958cc0b823c45b064ac
+      with:
+        scan-type: 'fs'
+        format: 'spdx-json'
+        output: 'dependency-results.sbom.json'
+        scan-ref: '.'
+
     - name: Upload Artifact
       uses: https://git.quad4.io/actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5
       with:
         name: reticulum-go-${{ matrix.goos }}-${{ matrix.goarch }}
-        path: reticulum-go-${{ matrix.goos }}-${{ matrix.goarch }}*
+        path: |
+          reticulum-go-${{ matrix.goos }}-${{ matrix.goarch }}*
+          bom.json
+          dependency-results.sbom.json
 
   release:
     name: Create Release