From 6e0db5c792eace026daa3468bd4cefe1c4f7e766 Mon Sep 17 00:00:00 2001
From: Anurag Sharma <36436571+anurag5sh@users.noreply.github.com>
Date: Thu, 26 Mar 2026 10:09:45 +0530
Subject: [PATCH] fix: exclude syft dependency import on NetBSD, OpenBSD, and
 Solaris (#13578)

The syft library has a transitive dependency on containerd, which includes
platform-specific code that doesn't compile on NetBSD, OpenBSD, and Solaris.

This change adds build constraints to exclude the syft import on these
platforms. The hcp-sbom provisioner functionality is unaffected since it
downloads and executes pre-built syft binaries at runtime rather than
using the Go library directly. The import exists solely for dependency
tracking in license and security scanning tools.
---
 provisioner/hcp-sbom/syft_dependency.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/provisioner/hcp-sbom/syft_dependency.go b/provisioner/hcp-sbom/syft_dependency.go
index eaaf76f9a..90185eade 100644
--- a/provisioner/hcp-sbom/syft_dependency.go
+++ b/provisioner/hcp-sbom/syft_dependency.go
@@ -1,6 +1,12 @@
 // Copyright IBM Corp. 2013, 2025
 // SPDX-License-Identifier: BUSL-1.1
 
+// Exclude platforms where containerd (a transitive dependency of syft) doesn't compile.
+// Containerd has platform-specific code that lacks support for NetBSD, OpenBSD, and Solaris.
+// This exclusion only affects dependency tracking; the hcp-sbom provisioner downloads
+// pre-built syft binaries at runtime and works on all platforms where those binaries exist.
+//go:build !netbsd && !openbsd && !solaris
+
 package hcp_sbom
 
 import (