.github/workflows/deploy.yml

@@ -264,12 +264,13 @@ jobs:
       # ============================================================
       # SBOM Generation with Syft
       # ============================================================
+      - name: Install Syft
+        run: |
+          curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
+
       - name: Generate SBOM with Syft
-        uses: anchore/sbom-action@v0
-        with:
-          image: ${{ steps.set-tag.outputs.full_image }}
-          format: spdx-json
-          output-file: sbom.spdx.json
+        run: |
+          syft ${{ steps.set-tag.outputs.full_image }} -o spdx-json=sbom.spdx.json
 
       # ============================================================
       # Image Signing with Cosign