Merge pull request kubernetes-sigs#563 from kubernetes-sigs/dependabot/github_actions/all-155e29b9d4

build(deps): bump chainguard-dev/actions from 1.5.6 to 1.5.7 in the all group

Author: k8s-ci-robot

.github/workflows/verify-spdx.yaml

@@ -33,17 +33,17 @@ jobs:
           go run ./cmd/bom/main.go generate -i registry.k8s.io/pause > example-image-pause.spdx
           go run ./cmd/bom/main.go generate --format=json -i registry.k8s.io/pause > example-image-pause.spdx.json
 
-      - uses: chainguard-dev/actions/setup-spdx@94249a4828defae94ef3eaeaafaff2f95f1b446f # v1.5.6
+      - uses: chainguard-dev/actions/setup-spdx@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # v1.5.7
         with:
           spdx-tools-version: 1.1.8
 
-      - uses: chainguard-dev/actions/setup-spdx@94249a4828defae94ef3eaeaafaff2f95f1b446f # v1.5.6
+      - uses: chainguard-dev/actions/setup-spdx@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # v1.5.7
         with:
           download: false
           spdx-tools-version: 1.1.8
           sbom-path: example-image-pause.spdx
 
-      - uses: chainguard-dev/actions/setup-spdx@94249a4828defae94ef3eaeaafaff2f95f1b446f # v1.5.6
+      - uses: chainguard-dev/actions/setup-spdx@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # v1.5.7
         with:
           download: false
           spdx-tools-version: 1.1.8