From 8a542b1e53a092a1552ddca41e39c5f8ba8a09db Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 16:35:11 +0000
Subject: [PATCH] chore(deps): update anchore/sbom-action action to v0.24.3

---
 .github/workflows/docker.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index b3ac181..fcbbd72 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -117,7 +117,7 @@ jobs:
           done
       - name: Install syft
         id: syft
-        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
+        uses: anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3
       # Release assets, not attestations: the registry gets BuildKit's SPDX
       # attestation per platform, the release gets CycloneDX files that the
       # OCM pipeline can embed. syft resolves the index to the runner's own