Bump anchore/sbom-action from 0.17.4 to 0.17.5 in the ci group #1718

	name: build
	on:
	pull_request:
	push:
	branches: [ 'main', 'release/**' ]

	permissions:
	contents: read # for actions/checkout to fetch code

	jobs:
	test-linux-amd64:
	runs-on: ubuntu-latest
	steps:
	- name: checkout
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
	- name: Setup Go
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version: 1.23.x
	cache-dependency-path: \|
	**/go.sum
	**/go.mod
	- name: Run tests
	run: make test
	- name: Verify
	run: make verify

	kind-linux-arm64:
	runs-on:
	group: "ARM64"
	steps:
	- name: checkout
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
	- name: Setup Go
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version: 1.23.x
	cache-dependency-path: \|
	**/go.sum
	**/go.mod
	- name: Run tests
	run: make test
	env:
	SKIP_COSIGN_VERIFICATION: true
	- name: Verify
	run: make verify

Provide feedback