Upgrade: [dependabot] - bump anchore/scan-action from 4 to 5 (#1369)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
4 to 5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>New in scan-action v5.0.0</h2>
<ul>
<li>chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>🚀 Features</h2>
<ul>
<li>feat: short-lived grype-db cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)
[<a href="https://github.com/kzantow">kzantow</a>]
Note: with this release grype is no longer installed on
<code>$PATH</code>. We suspect the changes here could break a number of
users of the action who have learned to expect Grype be installed on
<code>$PATH</code>.</li>
</ul>
<h2>v4.1.2</h2>
<h2>New in scan-action v4.1.2</h2>
<ul>
<li>Update Grype to v0.80.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/358">#358</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v4.1.1</h2>
<h2>New in scan-action v4.1.1</h2>
<ul>
<li>chore(deps): update Grype to v0.79.6 (<a
href="https://redirect.github.com/anchore/scan-action/issues/352">#352</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>Document grype-version parameter (<a
href="https://redirect.github.com/anchore/scan-action/issues/319">#319</a>)
[<a href="https://github.com/vprivat-ads">vprivat-ads</a>]</li>
</ul>
<h2>v4.1.0</h2>
<h2>New in scan-action v4.1.0</h2>
<ul>
<li>chore(deps): update Grype to v0.79.3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/341">#341</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anchore/scan-action/commit/4e08a16a68fb1b35d2fca00f0607db0b5b5120a7"><code>4e08a16</code></a>
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (<a
href="https://redirect.github.com/anchore/scan-action/issues/386">#386</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/a18ff2d1f2457caea9cd5a2e83608b68c71e995e"><code>a18ff2d</code></a>
add release docs (<a
href="https://redirect.github.com/anchore/scan-action/issues/388">#388</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/c6c022e58813e41feddd93a0956df6320a5e1702"><code>c6c022e</code></a>
chore: add changelog ignore (<a
href="https://redirect.github.com/anchore/scan-action/issues/387">#387</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/65953694f6f7cdea7bc15aff2df9d96e2b66b00d"><code>6595369</code></a>
chore: remove blocking workflow (<a
href="https://redirect.github.com/anchore/scan-action/issues/385">#385</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/11237475cc90e2bef5e7235d509a98f43092444d"><code>1123747</code></a>
chore(deps-dev): bump eslint from 9.11.1 to 9.12.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/381">#381</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/99311beeba3038ffde38aff849f8b7f313088d06"><code>99311be</code></a>
chore: update sha to correct pin for workflow actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/384">#384</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/2491ad68a961bf45d1a036f9472ef4481c81bd40"><code>2491ad6</code></a>
chore(deps): update Grype to v0.82.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/383">#383</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/2a3918e906deb404b9630a81a71baaa5798d6f75"><code>2a3918e</code></a>
chore: optionally cache grype-db in actions cache (<a
href="https://redirect.github.com/anchore/scan-action/issues/348">#348</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/a957c8db22cf88d9cfd2fe5c47495b617f918b2e"><code>a957c8d</code></a>
feat: update versions for actions (<a
href="https://redirect.github.com/anchore/scan-action/issues/380">#380</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/54efbc6a145377edc61740b0e4723896e08f8e15"><code>54efbc6</code></a>
chore(deps-dev): bump tslib from 2.6.3 to 2.7.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/359">#359</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/scan-action/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: anthony-nhs <[email protected]>

Author: dependabot[bot]

.github/workflows/quality_checks.yml

@@ -73,7 +73,7 @@ jobs:
 
       - name: Scan Node SBOM
         id: node-sbom-scan
-        uses: anchore/scan-action@v4
+        uses: anchore/scan-action@v5
         with:
           sbom: sbom-node.json
           output-format: json
@@ -90,7 +90,7 @@ jobs:
 
       - name: Scan Python SBOM
         id: python-sbom-scan
-        uses: anchore/scan-action@v4
+        uses: anchore/scan-action@v5
         with:
           sbom: sbom-python.json
           output-format: table