From f50a31a2eedc530ff5b3d26c33ebd7b3bb77b8a7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 09:34:03 +0000
Subject: [PATCH] Update anchore/sbom-action action to v0.24.2

---
 .github/workflows/releaser.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml
index fb5e18d49f..c95efa5aa6 100644
--- a/.github/workflows/releaser.yml
+++ b/.github/workflows/releaser.yml
@@ -117,7 +117,7 @@ jobs:
           cache: false # No cache for release builds — prevents cache poisoning attacks
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
+        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
 
       - name: Install Cosign
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2