Merge pull request #636 from spinframework/dependabot/github_actions/anchore/sbom-action-0.24.0

chore(deps): bump anchore/sbom-action from 0.22.2 to 0.24.0

Author: vdice

.github/workflows/sbom.yml

@@ -29,7 +29,7 @@ jobs:
         uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
 
       - name: Install the syft command
-        uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad # v0.22.2
+        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
 
       - name: Install the crane command
         uses: IAreKyleW00t/crane-installer@9c060df0c18f12aa0440c4cbac946d78bcab3c19 # v4.0.8