chore(github-action): update anchore/sbom-action action v0.20.5 → v0.20.6 (#39583)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action)
| action | patch | `da167ea` -> `f8bdd1d` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Release Notes

<details>
<summary>anchore/sbom-action (anchore/sbom-action)</summary>

###
[`v0.20.6`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.20.6)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.20.5...v0.20.6)

#### Changes in v0.20.6

- chore(deps): update Syft to v1.33.0
([#&#8203;537](https://redirect.github.com/anchore/sbom-action/issues/537))
\[\[[anchore-actions-token-generator\[bot\]](https://redirect.github.com/apps/anchore-actions-token-generator)]\(<https://github.com/>[anchore-actions-token-generator\[bot\]](https://redirect.github.com/apps/anchore-actions-token-generator))]
- chore: update actions library to resolve critical vulnerability
([#&#8203;536](https://redirect.github.com/anchore/sbom-action/issues/536))
\[[spiffcs](https://redirect.github.com/spiffcs)]

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iLCJyZW5vdmF0ZS9naXRodWItcmVsZWFzZSIsInR5cGUvcGF0Y2giXX0=-->
This commit is contained in:
TrueCharts Bot
2025-09-16 05:31:10 +02:00
committed by GitHub
parent 1ab4d22b0b
commit cc60f4c283

View File

@@ -195,7 +195,7 @@ jobs:
- uses: sigstore/cosign-installer@main
- name: Install Syft
uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
uses: anchore/sbom-action/download-syft@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # v0.20.6
- name: Login to Quay
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3