Bump anchore/sbom-action from 0.17.7 to 0.18.0 (ahmetb#111)

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
           go-version: stable
 
       - name: Download Syft
-        uses: anchore/sbom-action/download-syft@v0.17.7
+        uses: anchore/sbom-action/download-syft@v0.18.0
         if: github.ref_type == 'tag'
 
       - name: Install Cosign