chore(deps): bump anchore/sbom-action from 0.20.5 to 0.20.8 (#559)

Author: dependabot[bot]

.github/workflows/publish.yml

@@ -46,7 +46,7 @@ jobs:
         id: release_notes
         run: make release-notes > .release_notes
       - name: Set up Syft
-        uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
+        uses: anchore/sbom-action/download-syft@8e94d75ddd33f69f691467e42275782e4bfefe84 # v0.20.9
       - name: Run goreleaser-action
         uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
         with: