Bump anchore/sbom-action from 0.18.0 to 0.19.0 (ahmetb#117)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
           go-version: stable
 
       - name: Download Syft
-        uses: anchore/sbom-action/download-syft@v0.18.0
+        uses: anchore/sbom-action/download-syft@v0.19.0
         if: github.ref_type == 'tag'
 
       - name: Install Cosign