fix: correct SBOM artifact path in release workflow

Author: GamePad64

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
       - uses: actions/upload-artifact@v4
         with:
           name: sbom
-          path: "**/*.cdx.json"
+          path: act-cli.cdx.json
 
   release:
     name: GitHub Release
@@ -62,10 +62,10 @@ jobs:
         uses: actions/attest@v4
         with:
           subject-path: artifacts/act-*
-          sbom-path: sbom/act-cli/act-cli.cdx.json
+          sbom-path: sbom/act-cli.cdx.json
       - name: Create GitHub Release
         run: |
-          gh release create ${{ github.ref_name }} artifacts/act-* sbom/**/*.cdx.json \
+          gh release create ${{ github.ref_name }} artifacts/act-* sbom/*.cdx.json \
             --title "${{ github.ref_name }}" \
             --generate-notes
         env: