It doesn't run.

go run . --env trivy
Starting scanner audit...
Building wrapper image for env 'trivy'...
Generating signing keys...
2026/02/26 16:12:45 INFO generating keypair with a 4096 bit prime, please wait...
2026/02/26 16:12:46 INFO wrote private key to /tmp/scanner-audit-build-2844172676/melange.rsa
2026/02/26 16:12:46 INFO wrote public key to /tmp/scanner-audit-build-2844172676/melange.rsa.pub
Building package with melange...
2026/02/26 16:12:46 INFO melange devel with runner docker is building:
2026/02/26 16:12:46 INFO populating workspace /tmp/melange-workspace-3232181576 from /tmp/scanner-audit-build-2844172676
2026/02/26 16:12:48 INFO image configuration:
2026/02/26 16:12:48 INFO   contents:
2026/02/26 16:12:48 INFO     build repositories: [https://packages.wolfi.dev/os]
2026/02/26 16:12:48 INFO     runtime repositories: []
2026/02/26 16:12:48 INFO     repositories: []
2026/02/26 16:12:48 INFO     keyring:      [https://packages.wolfi.dev/os/wolfi-signing.rsa.pub]
2026/02/26 16:12:48 INFO     packages:     []
2026/02/26 16:12:48 INFO   accounts:
2026/02/26 16:12:48 INFO     runas:  
2026/02/26 16:12:48 INFO     users:
2026/02/26 16:12:48 INFO       - uid=1000(build) gid=1000
2026/02/26 16:12:48 INFO     groups:
2026/02/26 16:12:48 INFO       - gid=1000(build) members=[build]
2026/02/26 16:12:48 INFO auth configured for: 0x10133dd50
2026/02/26 16:12:48 WARN /etc/os-release is missing
2026/02/26 16:12:48 INFO layer digest: sha256:ded6fade59720147074810bf523ae1575bb5eb09953ee8624b2fe2aa8be1a1a9
2026/02/26 16:12:48 INFO layer diffID: sha256:082f1841e8922d3eafca2acb0a883cd261aba984d4c7a6c8574c0fc3bb435780
2026/02/26 16:12:48 INFO saving OCI image locally: apko.local/cache:9cdf786a2bfb11630e706a1a16b6942ab35d322edc72d64c005dc5df18fc92e2
2026/02/26 16:12:48 INFO tagging local image apko.local/cache:9cdf786a2bfb11630e706a1a16b6942ab35d322edc72d64c005dc5df18fc92e2 as index.docker.io/library/melange:latest
Error: failed to build wrapper image: failed to build package with melange: unable to start pod: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: exec: "/bin/sh": stat /bin/sh: no such file or directory
exit status 1

I did git checkout b37a7ac394f80ad0a53d1b61a95a5a64e4439748 to get to an older commit that works.
But one of the recent automated update commits has broken it.
(Does the auto-update not run the tool to ensure it didn't break it????)

Start by reproducing go run . --env trivy and compare the current checkout with commit b37a7ac394f80ad0a53d1b61a95a5a64e4439748. Inspect the recent automated update commits to identify which change causes the Docker task to fail because /bin/sh is missing. Done means the current checkout completes the wrapper image build successfully.