chore(actions): set sbom-action to 0.17.0 and add permission

Author: portellaa

.github/workflows/pull-request.yaml

@@ -18,6 +18,7 @@ env:
 
 
 permissions:
+  actions: read
   id-token: write
   contents: read
   packages: read
@@ -71,7 +72,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Create SBOM
-      uses: anchore/sbom-action@v0
+      uses: anchore/sbom-action@v0.17.0
       with:
         upload-artifact-retention: 1
         format: cyclonedx-json