shows all locations and the order in which syft will look for a configuration file
zarf tools sbom config locations [flags]
--all include every file extension supported -h, --help help for locations
-c, --config stringArray syft configuration file(s) to use --insecure-skip-tls-verify Skip checking server's certificate for validity. This flag should only be used if you have a specific reason and accept the reduced security posture. --plain-http Force the connections over HTTP instead of HTTPS. This flag should only be used if you have a specific reason and accept the reduced security posture. --profile stringArray configuration profiles to use -q, --quiet suppress all logging output -v, --verbose count increase verbosity (-v = info, -vv = debug)