From c4bd35609e05290b2e2b978245e03463c8ce35bb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 17:26:01 +0000
Subject: [PATCH] chore(deps): update anchore/sbom-action action to v0.24.3

---
 .github/workflows/ci.yml   | 2 +-
 .github/workflows/sbom.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8e4d8033..ad722148 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -87,7 +87,7 @@ jobs:
           pip install semgrep==1.164.0
           semgrep scan --error --config p/python --config p/owasp-top-ten src/niles/
       - name: SBOM (CycloneDX via syft)
-        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
+        uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c  # v0.24.3
         with:
           path: .
           artifact-name: niles-sbom.cdx.json
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index f68de382..ee0ed18a 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26  # v0.24.2
+        uses: anchore/sbom-action/download-syft@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c  # v0.24.3
 
       - name: Generate SBOM
         run: syft dir:. -o cyclonedx-json=sbom.cdx.json