ci: use unirtm install to provide syft for goreleaser sboms

Author: snowdream

.github/workflows/goreleaser.yml

@@ -213,8 +213,24 @@ jobs:
           cleanup: true
         timeout-minutes: 5
 
-      - name: "📦 Install Syft"
-        uses: anchore/sbom-action/download-syft@v0
+      - name: "⚡ Cache UniRTM Tools"
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        with:
+          path: |
+            ~/.local/bin
+            ~/.local/share/unirtm
+            ~/Library/Application Support/unirtm
+            ~/AppData/Local/unirtm
+          key: ${{ runner.os }}-unirtm-${{ hashFiles('.unirtm.toml', 'unirtm.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-unirtm-
+
+      - name: "🚀 Initialize Development Environment"
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ secrets.WORKFLOW_SECRET || secrets.GITHUB_TOKEN }}
+        run: |
+          unirtm install
 
       - name: "🚀 Distribute Artifacts (GoReleaser)"
         uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0