The current build scripts generate SBOMs for the artifacts, but these don't include license information for the Go packages.