Merge pull request #219 from smlx/simplify-sbom

fix: avoid unnecessary SBOM variable in release workflow

Author: smlx

.github/workflows/release.yaml

@@ -60,7 +60,6 @@ jobs:
         args: release --clean
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        GITHUB_SBOM_PATH: ./sbom.spdx.json
     # attest artefacts
     - uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
       with:

.goreleaser.yaml

@@ -83,5 +83,5 @@ docker_manifests:
 
 release:
   extra_files:
-  - glob: "{{ .Env.GITHUB_SBOM_PATH }}"
+  - glob: ./sbom.spdx.json
     name_template: "{{ .ProjectName }}.v{{ .Version }}.sbom.spdx.json"