Merge pull request #31 from github-samples/dependabot/github_actions/actions/attest-sbom-3.0.0

build(deps): Bump actions/attest-sbom from 2.4.0 to 3.0.0

Author: chrisreddington

.github/workflows/attest-and-deploy.yml

@@ -54,7 +54,7 @@ jobs:
       #     subject-path: "dist.tar.gz"
 
       # Complete an attestation of the SBOM and the build
-      - uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b
+      - uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34
         with:
           subject-path: 'dist.tar.gz'
           sbom-path: 'sbom.spdx.json'