ci: remove sbom generation step (#440)

The SBOM generation step is not used any more, so removing
this step to avoid an unnecessary step that could be a supply chain attack vector.

Co-authored-by: Leonid Bugaev <leonsbox@gmail.com>
Co-authored-by: Asutosh <1187055+asutosh@users.noreply.github.com>

Author: 3 people

policy/templates/releng/.github/workflows/release.yml

@@ -59,13 +59,6 @@ jobs:
 
 {{- template "smoke-tests" . }}
 
-  sbom:
-    needs: goreleaser
-    uses: TykTechnologies/github-actions/.github/workflows/sbom.yaml@42304edda365365e0a887cf018d8edc34b960b82  # main
-    secrets:
-      DEPDASH_URL: ${{`{{ secrets.DEPDASH_URL }}`}}
-      DEPDASH_KEY: ${{`{{ secrets.DEPDASH_KEY }}`}}
-      ORG_GH_TOKEN: ${{`{{ secrets.ORG_GH_TOKEN }}`}}
 {{- if eq .Name "tyk-analytics" }}
   report_logs:
     runs-on: {{`${{ vars.DEFAULT_RUNNER }}`}}

policy/templates/releng/.github/workflows/release.yml.d/goreleaser.gotmpl

@@ -274,7 +274,6 @@
           file: ci/Dockerfile.std
           {{ end }}
           provenance: mode=max
-          sbom: true
           push: true
           cache-from: type=gha
           cache-to: type=gha,mode=max
@@ -315,7 +314,6 @@
           file: ci/Dockerfile.std
           {{- end }}
           provenance: mode=max
-          sbom: true
           cache-from: type=gha
           cache-to: type=gha,mode=max
           push: {{`${{ startsWith(github.ref, 'refs/tags') }}`}}