chore(deps): update anchore/sbom-action action to v0.17.9 #1429

	---
	name: trivy-container-scan

	# Run for all pushes to main and pull requests when Go or YAML files change
	on:
	push:
	branches:
	- main
	schedule:
	- cron: '23 20 * * 2'
	pull_request:

	jobs:
	scan-trivy-1:
	name: sec-scan-trivy-1
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version: '1.21'

	- name: Build go binary
	run: \|
	go build -o metadataservice .

	- name: Build
	uses: docker/build-push-action@v5
	with:
	context: .
	file: ./Dockerfile
	push: false
	load: true
	tags: localbuild/sec-scan-trivy:latest

	- name: Scan image
	uses: aquasecurity/trivy-action@master
	with:
	image-ref: localbuild/sec-scan-trivy:latest
	format: 'table'
	exit-code: '1'
	ignore-unfixed: true
	vuln-type: 'os,library'
	severity: 'CRITICAL,HIGH'

Provide feedback