update: bump the gh-actions-packages group with 2 updates

Bumps the gh-actions-packages group with 2 updates: [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) and [anchore/sbom-action](https://github.com/anchore/sbom-action).


Updates `bridgecrewio/checkov-action` from 12.2580.0 to 12.2586.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@558f721...93e6fa1)

Updates `anchore/sbom-action` from 0.14.3 to 0.15.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@78fc58e...fd74a6f)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/.reusable-sast.yml

@@ -128,7 +128,7 @@ jobs:
  helm template helm > deployment/deployment.yaml
  shell: bash
  - name: Scan
- uses: bridgecrewio/checkov-action@558f721c4bd65a6fc59b02448ffc792eb721cb9b # v12.2580.0
+ uses: bridgecrewio/checkov-action@93e6fa1977e0974dc1f31c155680f89d1fb5de97 # v12.2586.0
  with:
  soft_fail: true
  output_format: cli,sarif

.github/workflows/.reusable-sca.yml

@@ -97,7 +97,7 @@ jobs:
  username: ${{ inputs.repo_owner }}
  password: ${{ secrets.GITHUB_TOKEN }}
  - name: Run
- uses: anchore/sbom-action@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
+ uses: anchore/sbom-action@fd74a6fb98a204a1ad35bbfae0122c1a302ff88b # v0.15.0
  with:
  image: ${{ inputs.image }}
  format: cyclonedx-json