refactor: expand ScanConfig usage in orchestrator functions

- Pass config.sbomgen_version to install_sbomgen() instead of full args object
- Add config parameter to invoke_sbomgen() for structured data access
- Replace args.artifact_path with config.artifact_path in sbomgen command
- Maintain dual args/config system during gradual migration

Author: bluesentinelsec

entrypoint/entrypoint/orchestrator.py

@@ -20,11 +20,11 @@ def execute(args) -> int:
 
     # OLD: Keep existing logic unchanged for now
     logging.info(f"downloading and installing inspector-sbomgen version {config.sbomgen_version}")
-    ret = install_sbomgen(args)
+    ret = install_sbomgen(config.sbomgen_version)
     require_true((ret == 0), "unable to download and install inspector-sbomgen")
 
     logging.info("generating SBOM from artifact")
-    ret = invoke_sbomgen(args)
+    ret = invoke_sbomgen(args, config)
     require_true(ret == 0, "unable to generate SBOM with inspector-sbomgen")
 
     logging.info("scanning SBOM contents with Amazon Inspector")
@@ -152,7 +152,7 @@ def get_sbomgen_arch(host_cpu):
     return None
 
 
-def invoke_sbomgen(args) -> int:
+def invoke_sbomgen(args, config) -> int:
     sbomgen = installer.get_sbomgen_install_path()
     if sbomgen == "":
         logging.error("expected path to inspector-sbomgen but received empty string")
@@ -183,7 +183,7 @@ def invoke_sbomgen(args) -> int:
 
     # invoke sbomgen with arguments
     sbomgen_args = [args.artifact_type,
-                    path_arg, args.artifact_path,
+                    path_arg, config.artifact_path,
                     "--outfile", args.out_sbom,
                     "--disable-progress-bar",
                     "--timeout", str(config.timeout),
@@ -439,10 +439,10 @@ def get_fixed_vuln_counts(inspector_scan_path: str) -> tuple[bool, fixed_vulns.F
     return True, fixed_vulns_counts
 
 
-def install_sbomgen(args):
+def install_sbomgen(sbomgen_version):
     os_name = platform.system()
     if "Linux" in os_name:
-        ret = download_install_sbomgen(args.sbomgen_version, "/usr/local/bin/inspector-sbomgen")
+        ret = download_install_sbomgen(sbomgen_version, "/usr/local/bin/inspector-sbomgen")
         if not ret:
             return 1