Bump anchore/sbom-action from 0.12.0 to 0.15.8 (grafana#3361)

* Bump anchore/sbom-action from 0.12.0 to 0.15.8

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.12.0 to 0.15.8.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@v0.12.0...v0.15.8)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* add remote setting

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jennie Pham <jenniepham0221@gmail.com>

.github/workflows/dependabot_serverless_gomod.yml

@@ -39,5 +39,9 @@ jobs:
           git diff --quiet --staged || git commit -m 'Update serverless gomod'
 
       - name: Push changes
+        env:
+          USER: grafanabot
+          TOKEN: ${{ secrets.GH_BOT_ACCESS_TOKEN }}
         run: |
+          git remote set-url origin https://${USER}:${TOKEN}@github.com/grafana/tempo.git
           git push origin ${{ github.head_ref }}

.github/workflows/sbom-report.yml

@@ -14,7 +14,7 @@ jobs:
       uses: actions/checkout@v2
 
     - name: Anchore SBOM Action
-      uses: anchore/sbom-action@v0.12.0
+      uses: anchore/sbom-action@v0.15.8
       with:
          artifact-name: ${{ github.event.repository.name }}-spdx.json