go1.18: Preserve trailing tabs while massaging go version -m output

[tstromberg]

Allows ko on both go v1.17 and v1.18 to parse go version -m output that contains a local replace directive. For example:

./main: go1.18
	path	command-line-arguments
	dep	secret.dev/api	v0.0.0-00010101000000-000000000000
	=>	../api	(devel)	
	

The issue is that ParseBuildInfo assumes there is a 3rd column that contains a checksum, which is not applicable to local replace directives. This patch inserts the extra tab, allowing it to have an empty checksum.

Fixes #666

[imjasonh]

Can we add this to massageBuildInfo?

[imjasonh]

https://github.com/google/ko/blob/main/internal/sbom/sbom.go#L29

[tstromberg]

Ooh, I didn't notice massageBuildInfo before. Not only is the perfect place to implement this, but uhh.. it apparently the source of the bug too! I'll revise the patch.

[imjasonh]

Ooh, I didn't notice massageBuildInfo before. Not only is the perfect place to implement this, but uhh.. it apparently the source of the bug too! I'll revise the patch.

Oh no. 😭

[tstromberg]

Thanks again for the massageBuildInfo hint.

This PR has been updated to address the root cause instead of putting lipstick on a pig.

[imjasonh]

🎉🎉🎉

[codecov-commenter]

Codecov Report

Merging #668 (256f31a) into main (327a88f) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main     #668   +/-   ##
=======================================
  Coverage   51.62%   51.62%           
=======================================
  Files          44       44           
  Lines        3268     3268           
=======================================
  Hits         1687     1687           
  Misses       1371     1371           
  Partials      210      210           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 327a88f...256f31a. Read the comment docs.