chore(deps): update anchore/sbom-action action to v0.17.0

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
anchore/sbom-action	action	minor	v0.16.1 -> v0.17.0

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

### [`v0.17.0`](https://togithub.com/anchore/sbom-action/releases/tag/v0.17.0) [Compare Source](https://togithub.com/anchore/sbom-action/compare/v0.16.1...v0.17.0) #### Changes in v0.17.0 - chore(deps): update Syft to v1.9.0 ([#​479](https://togithub.com/anchore/sbom-action/issues/479)) \[[anchore-actions-token-generator](https://togithub.com/anchore-actions-token-generator)] - chore(deps): bump actions/checkout from 4.1.6 to 4.1.7 ([#​474](https://togithub.com/anchore/sbom-action/issues/474)) \[[dependabot](https://togithub.com/dependabot)] - chore(deps): bump peter-evans/create-pull-request from 6.0.5 to 6.1.0 ([#​475](https://togithub.com/anchore/sbom-action/issues/475)) \[[dependabot](https://togithub.com/dependabot)] - chore: serialize tests to prevent install race ([#​478](https://togithub.com/anchore/sbom-action/issues/478)) \[[willmurphyscode](https://togithub.com/willmurphyscode)]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/anchore/sbom-action	d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5	:green_circle: 5	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 9 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: 0 Project has not signed or included provenance with any releases. Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 9 binaries present in source code Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected Pinned-Dependencies :green_circle: 7 dependency not pinned by hash detected -- score normalized to 7 SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Packaging :green_circle: 10 packaging workflow detected Vulnerabilities :warning: 1 9 existing vulnerabilities detected
actions/anchore/sbom-action	d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5	:green_circle: 5	Details Check Score Reason Code-Review :green_circle: 10 all changesets reviewed Maintained :green_circle: 9 11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Branch-Protection :warning: -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases :warning: 0 Project has not signed or included provenance with any releases. Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Binary-Artifacts :green_circle: 9 binaries present in source code Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed Security-Policy :warning: 0 security policy file not detected Pinned-Dependencies :green_circle: 7 dependency not pinned by hash detected -- score normalized to 7 SAST :warning: 0 SAST tool is not run on all commits -- score normalized to 0 Packaging :green_circle: 10 packaging workflow detected Vulnerabilities :warning: 1 9 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/publish.yaml

• anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
• anchore/sbom-action@95b086ac308035dc0850b3853be5b7ab108236a8

.github/workflows/pullrequest.yaml

• anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
• anchore/sbom-action@95b086ac308035dc0850b3853be5b7ab108236a8

[codecov[bot]]

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 100.00%. Comparing base (81657bd) to head (3fb7135). Report is 127 commits behind head on main.

Additional details and impacted files

[](https://app.codecov.io/gh/mcaulifn/solcast/pull/290?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) ```diff @@ Coverage Diff @@ ## main #290 +/- ## ========================================= Coverage 100.00% 100.00% ========================================= Files 7 7 Lines 126 126 ========================================= Hits 126 126 ``` | [Flag](https://app.codecov.io/gh/mcaulifn/solcast/pull/290/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | Coverage Δ | | |---|---|---| | [unittests](https://app.codecov.io/gh/mcaulifn/solcast/pull/290/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) | `100.00% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe#carryforward-flags-in-the-pull-request-comment) to find out more. ------ [Continue to review full report in Codecov by Sentry](https://app.codecov.io/gh/mcaulifn/solcast/pull/290?dropdown=coverage&src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). > **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe) > `Δ = absolute (impact)`, `ø = not affected`, `? = missing data` > Powered by [Codecov](https://app.codecov.io/gh/mcaulifn/solcast/pull/290?dropdown=coverage&src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Last update [1391d24...3fb7135](https://app.codecov.io/gh/mcaulifn/solcast/pull/290?dropdown=coverage&src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=Nathaniel+McAuliffe).

[codeclimate[bot]]

Code Climate has analyzed commit 00e707b7 and detected 0 issues on this pull request.

View more on Code Climate.