Merge pull request #8886 from jenkins-x/dependabot/github_actions/anchore/sbom-action-0.20.5

jenkins-x-bot · web-flow · commit f7e85946a6c3 · 2025-08-22T08:37:13.000+01:00
chore(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5
diff --git a/.github/workflows/jenkins-x-release.yaml b/.github/workflows/jenkins-x-release.yaml
@@ -59,7 +59,7 @@ jobs:
         username: jenkins-x
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: syft-installer
-      uses: anchore/sbom-action/download-syft@v0.20.4
+      uses: anchore/sbom-action/download-syft@v0.20.5
     - name: cosign-installer
       uses: sigstore/cosign-installer@v3.9.2
       with:

-Original file line number
+Diff line change
         username: jenkins-x
         password: ${{ secrets.GITHUB_TOKEN }}
     - name: syft-installer
 -      uses: anchore/sbom-action/[email protected].4
 +      uses: anchore/sbom-action/[email protected].5
     - name: cosign-installer
       uses: sigstore/[email protected]
       with: