go1.18: Preserve trailing tabs while massaging go version -m output (…

…#668)

* go1.18 compatibility: Add workaround for local replace directives

* Fix actual bug where trailing tabs were stripped

internal/sbom/mod_1.18.go

@@ -25,7 +25,7 @@ import (
 type BuildInfo debug.BuildInfo
 
 func ParseBuildInfo(data string) (*BuildInfo, error) {
-	dbi, err := debug.ParseBuildInfo(string(data))
+	dbi, err := debug.ParseBuildInfo(data)
 	if err != nil {
 		return nil, fmt.Errorf("parsing build info: %w", err)
 	}

internal/sbom/sbom.go

@@ -19,6 +19,7 @@ import (
 	"bytes"
 	"fmt"
 	"strings"
+	"unicode"
 )
 
 // massageGoModVersion massages the output of `go version -m` into a form that
@@ -41,7 +42,8 @@ func massageGoVersionM(b []byte) ([]byte, error) {
 		return nil, fmt.Errorf("malformed input: %w", err)
 	}
 	for scanner.Scan() {
-		line := strings.TrimSpace(scanner.Text())
+		// NOTE: debug.ParseBuildInfo relies on trailing tabs.
+		line := strings.TrimLeftFunc(scanner.Text(), unicode.IsSpace)
 		fmt.Fprintln(&out, line)
 	}
 	if err := scanner.Err(); err != nil {