Add image name filters to src sbom fetch command

[marcleblanc2]

When running src sbom fetch, all container images of the given release version would always get their SBOMs fetched; this leads to HTTP 429 rate limit blocks from Dockerhub if more than 2 versions are fetched. Allowing filtering of image names means that more versions can have SBOMs fetched for fewer images.

Test plan

Amp wrote the code and tested it itself

I was also able to run it successfully in my Bash script:

declare -a versions=("6.4.1203" "6.4.0" "6.3.4167" ... "5.8.0")
for version in "${versions[@]}"
do
    go run ./cmd/src sbom fetch -v "$version" --image 'postgres*' --exclude-image '*exporter*,*codeinsights*'
done

• Amp thread here
• Slack thread here
• Linear issue from Slack thread SEC-3108 Find easier way to fetch SBOMs for specific postgres versions