The deployment pipeline has been broken for almost a month due to bugs introduced in more recent versions of Syft affecting SBOM attestation. This PR aims to provide a temporary solution by downgrading Syft to the last working version (v0.65.0).
(Also contains upgrades to some outdated actions.)
The deployment pipeline has been broken for almost a month due to bugs introduced in more recent versions of Syft affecting SBOM attestation. This PR aims to provide a temporary solution by downgrading Syft to the last working version (v0.65.0). (Also contains upgrades to some outdated actions.)