From 281f7b80a686e9aaca85f061fb79f1b949767a90 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 04:35:45 +0000
Subject: [PATCH] fix(deps): update dependency anchore/syft to v1.57.0

---
 .github/workflows/cd.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 0014880..b257437 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -232,7 +232,7 @@ jobs:
         # artifact); the SBOM is attested to the registry in the next step.
         env:
           # renovate: datasource=github-releases depName=anchore/syft extractVersion=^v(?<version>.+)$
-          SYFT_VERSION: "1.56.0"
+          SYFT_VERSION: "1.57.0"
         uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3
         with:
           image: ghcr.io/${{ github.repository }}/manifests@${{ steps.cosign-sign.outputs.digest }}