Bump anchore/sbom-action from 0.16.0 to 0.17.0 (#88) #37

	name: CI

	on:
	push:
	branches:
	- master
	tags:
	- "v[0-9]+.[0-9]+.[0-9]+*"
	pull_request:
	branches:
	- master

	permissions:
	contents: read

	jobs:
	build:
	name: Build
	runs-on: ubuntu-22.04
	permissions:
	contents: write
	id-token: write
	steps:
	- name: Checkout Repository
	uses: actions/[email protected]
	with:
	fetch-depth: 0

	- name: Setup Golang Environment
	uses: actions/[email protected]
	with:
	go-version: stable

	- name: Download Syft
	uses: anchore/sbom-action/[email protected]
	if: github.ref_type == 'tag'

	- name: Install Cosign
	uses: sigstore/[email protected]
	if: github.ref_type == 'tag'

	- name: Build binary
	uses: goreleaser/[email protected]
	with:
	version: latest
	args: ${{ github.ref_type == 'tag' && 'release' \|\| 'build --snapshot' }} --clean
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback