Download the SBOMs to be able to add them to the release

Author: alexiri

.github/workflows/create-release.yml

@@ -33,6 +33,13 @@ jobs:
           merge-multiple: true
           path: /tmp/changelogs
 
+      - name: Fetch SBOMs
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v4
+        with:
+          pattern: *.spdx.json
+          merge-multiple: true
+          path: /tmp/sboms
+
       - name: Prepare Release
         id: prepare-release
         shell: bash
@@ -83,4 +90,4 @@ jobs:
           tag_name: ${{ inputs.version }}
           body_path: ./changelog.md
           make_latest: true
-          files: *.spdx.json
+          files: /tmp/sboms/*.spdx.json