Merge pull request #496 from roots/dependabot/github_actions/actions/attest-sbom-2

Bump actions/attest-sbom from 1 to 2

Author: swalkinshaw

.github/workflows/release.yml

@@ -78,7 +78,7 @@ jobs:
       - uses: actions/download-artifact@v4
         with:
           name: sboms
-      - uses: actions/attest-sbom@v1
+      - uses: actions/attest-sbom@v2
         with:
           subject-path: ${{ matrix.attestation.subject }}
           sbom-path: ${{ matrix.attestation.sbom }}