license: add bill of materials.

[diegs]

No description provided.

[ericchiang]

Can we pin this instead of running go get?

[diegs]

@ericchiang pin how?

[ericchiang]

Pinned to a specific version instead of grabbing master every time. Either by vendoring the tool into Dex (what we do with the go proto generator) or by grabbing a release binary at a specific tag.

[diegs]

Ok. There are no release binaries, so I'll figure out how to vendor it.

[diegs]

@ericchiang PTAL

[ericchiang]

@diegs tried to run this locally. Looks like there's an additional dependency?

$ make bin/license-bill-of-materials 
vendor/github.com/coreos/license-bill-of-materials/license-bill-of-materials.go:19:2: cannot find package "github.com/pmezard/licenses/assets" in any of:
        /home/eric/src/github.com/coreos/dex/vendor/github.com/pmezard/licenses/assets (vendor tree)
        /usr/local/go/src/github.com/pmezard/licenses/assets (from $GOROOT)
        /home/eric/src/github.com/pmezard/licenses/assets (from $GOPATH)
make: *** [Makefile:80: bin/license-bill-of-materials] Error 1

[diegs]

@ericchiang bumped the vendor with the fix.