Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.24.0 to 0.24.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's releases</a>.</em></p> <blockquote> <h2>v0.24.2</h2> <h3>Added Features</h3> <ul> <li>bump eslint from 10.8.1 to 10.9.0 [<a href="https://redirect.github.com/anchore/sbom-action/pull/724">#724</a> <a href="https://github.com/dependabot"><code>@dependabot</code></a>]</li> </ul> <h3>Additional Changes</h3> <ul> <li>add makefile target to bump syft [<a href="https://redirect.github.com/anchore/sbom-action/pull/620">#620</a> <a href="https://github.com/willmurphyscode"><code>@willmurphyscode</code></a>]</li> <li>update zizmor workflow triggers [<a href="https://redirect.github.com/anchore/sbom-action/pull/624">#624</a> <a href="https://github.com/wagoodman"><code>@wagoodman</code></a>]</li> <li>require zizmor security events [<a href="https://redirect.github.com/anchore/sbom-action/pull/621">#621</a> <a href="https://github.com/wagoodman"><code>@wagoodman</code></a>]</li> </ul> <p><strong><a href="https://github.com/anchore/sbom-action/compare/v0.24.0...v0.24.2">(Full Changelog)</a></strong></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/anchore/sbom-action/commit/3ad7283483fc7af8ff2b4ea19663c2d5ca935e26"><code>3ad7283</code></a> ops: update write permissions for release (<a href="https://redirect.github.com/anchore/sbom-action/issues/723">#723</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/31f5287d0c257c8bc49b610d01b16bd7c4c89482"><code>31f5287</code></a> chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/724">#724</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/aa80c8c5bd439a416a62804f2151ab38c671a638"><code>aa80c8c</code></a> chore(deps): update Syft to latest release (<a href="https://redirect.github.com/anchore/sbom-action/issues/722">#722</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/74b54e97f669d9e2e6b728114eac6a92940f9c1c"><code>74b54e9</code></a> chore(deps): bump lodash from 4.17.23 to 4.18.1 (<a href="https://redirect.github.com/anchore/sbom-action/issues/623">#623</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/6b92ff5b2cce1787a99198f282dd8a26d1991449"><code>6b92ff5</code></a> chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 (<a href="https://redirect.github.com/anchore/sbom-action/issues/721">#721</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/4f8983b9311d3d896e6bd8a3fb90cf4afde91b5c"><code>4f8983b</code></a> chore(deps-dev): bump typescript-eslint from 8.65.0 to 8.67.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/719">#719</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/10f27f499cc07de2496e6ec84c95f019fbbfe061"><code>10f27f4</code></a> chore(deps-dev): bump eslint from 10.5.0 to 10.8.1 (<a href="https://redirect.github.com/anchore/sbom-action/issues/720">#720</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/249403a067afdb4dc73ece33bce948606f486da1"><code>249403a</code></a> chore(deps-dev): bump <code>@types/node</code> from 26.1.0 to 26.2.0 (<a href="https://redirect.github.com/anchore/sbom-action/issues/718">#718</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/cbf8daab5ef08eec2b4849d40f2798fae7c50855"><code>cbf8daa</code></a> chore(deps): bump anchore/workflows/.github/workflows/check-gate.yaml (<a href="https://redirect.github.com/anchore/sbom-action/issues/693">#693</a>)</li> <li><a href="https://github.com/anchore/sbom-action/commit/6afc7939587b28fc3a3cb96958223f88c7efa864"><code>6afc793</code></a> fix: pin syft install.sh to the release tag being installed (<a href="https://redirect.github.com/anchore/sbom-action/issues/716">#716</a>)</li> <li>Additional commits viewable in <a href="https://github.com/anchore/sbom-action/compare/e22c389904149dbc22b58101806040fa8d37a610...3ad7283483fc7af8ff2b4ea19663c2d5ca935e26">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.24.0&new-version=0.24.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-Original file line number
+Diff line change
           merge-multiple: true
       - name: Generate CycloneDX SBOM (workspace)
 -        uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0
 +        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
         with:
           path: .
           format: cyclonedx-json