chore: temporary workaround goreleaser bug

see goreleaser/goreleaser#4718

Author: smlx

.github/workflows/release.yaml

@@ -69,7 +69,9 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - name: Move sbom to avoid dirty git
-      run: mv "$GITHUB_SBOM_PATH" /tmp/sbom.spdx.json
+      run: >
+        mkdir -p ./dist
+        mv "$GITHUB_SBOM_PATH" ./dist/sbom.spdx.json
       env:
         GITHUB_SBOM_PATH: ${{ steps.sbom.outputs.fileName }}
     - uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
@@ -78,4 +80,4 @@ jobs:
         args: release --clean
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        GITHUB_SBOM_PATH: /tmp/sbom.spdx.json
+        GITHUB_SBOM_PATH: ./dist/sbom.spdx.json