Propogate image-resolve-mode for SBOM generator image

[jedevc]

I discovered that updates to the :edge tag for buildkit-syft-scanner weren't re-running the scanner, even though we had a new image.

To enable this behavior, we need to pass through the value of the image-resolve-mode parameter, similar to how we do for the no-cache parameter.

[tonistiigi]

I discovered that updates to the :edge tag for buildkit-syft-scanner weren't re-running the scanner,

You mean when you had image with the same name in docker images or in what case it didn't work? Picking up tag updates should be the default with no extra config needed.

[jedevc]

Picking up tag updates should be the default with no extra config needed.

Indeed - this looks possibly related to another issue, I need to investigate a bit further. The image-resolve-mode parameter doesn't seem related.

[jedevc]

Looks like the related issue was related to #3454, which looked like it caused some weirdness with builds using cache, and --no-cache being processed simultaneously. Weird, but definitely not related to this, we should be fine to merge this PR.

[jedevc]

Hm, this should have probably made it for v0.11, but didn't. I'm gonna milestone this for v0.12, not an urgent one, but image-resolve-mode should apply for the SBOM generation image.

[tonistiigi]

@jedevc Needs rebase