diff --git a/images/sdk/configs/latest.apko.yaml b/images/sdk/configs/latest.apko.yaml
index 54921f92..59648ae6 100644
--- a/images/sdk/configs/latest.apko.yaml
+++ b/images/sdk/configs/latest.apko.yaml
@@ -1,6 +1,12 @@
 contents:
+  repositories:
+    - https://packages.cgr.dev/extras
+  keyring:
+    - https://packages.cgr.dev/extras/chainguard-extras.rsa.pub
   packages:
+    - bash-completion
     - ca-certificates-bundle
+    - chainctl
     - wolfi-baselayout
     - sdk
     - grype
diff --git a/images/sdk/main.tf b/images/sdk/main.tf
index 77f07272..469027f4 100644
--- a/images/sdk/main.tf
+++ b/images/sdk/main.tf
@@ -19,6 +19,7 @@ module "latest" {
 
   target_repository = var.target_repository
   config            = file("${path.module}/configs/latest.apko.yaml")
+  check_sbom        = false // chainctl doesn't use SPDX compliant license
 }
 
 module "test-latest" {