Even the minimal SBOM part? It's hard to be more minimal than a busybox binary.

That’s fair, NixOS avoids the direct stuff from Docker itself but if you’re basing on an Alpine image or something that would probably be more minimal / smaller