update: bump the gh-actions-packages group with 2 updates

Bumps the gh-actions-packages group with 2 updates: [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) and [anchore/sbom-action](https://github.com/anchore/sbom-action).


Updates `bridgecrewio/checkov-action` from 12.2580.0 to 12.2586.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@558f721...93e6fa1)

Updates `anchore/sbom-action` from 0.14.3 to 0.15.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@78fc58e...fd74a6f)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/.reusable-sast.yml

@@ -128,7 +128,7 @@ jobs:
           helm template helm > deployment/deployment.yaml
         shell: bash
       - name: Scan
-        uses: bridgecrewio/checkov-action@558f721c4bd65a6fc59b02448ffc792eb721cb9b # v12.2580.0
+        uses: bridgecrewio/checkov-action@93e6fa1977e0974dc1f31c155680f89d1fb5de97 # v12.2586.0
         with:
           soft_fail: true
           output_format: cli,sarif

.github/workflows/.reusable-sca.yml

@@ -97,7 +97,7 @@ jobs:
           username: ${{ inputs.repo_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - name: Run
-        uses: anchore/sbom-action@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
+        uses: anchore/sbom-action@fd74a6fb98a204a1ad35bbfae0122c1a302ff88b # v0.15.0
         with:
           image: ${{ inputs.image }}
           format: cyclonedx-json