use uv group sbom, bypass scan for testing

Author: jasonhills-mongodb

.github/workflows/generate_sbom.yml

@@ -28,18 +28,24 @@ jobs:
       working-directory: ${{env.BUILD}}
       run: cmake .. -DCMAKE_BUILD_TYPE=${{env.BUILD_TYPE}} -DCMAKE_CXX_STANDARD=${{env.CXX_STANDARD}} -DENABLE_TESTS=ON
 
-    - name: Install endorctl and Scan with Endor Labs
-      uses: endorlabs/github-action@519df81de5f68536c84ae05ebb2986d0bb1d19fc # v1.1.8
+    # - name: Install endorctl and Scan with Endor Labs
+    #   uses: endorlabs/github-action@519df81de5f68536c84ae05ebb2986d0bb1d19fc # v1.1.8
+    #   with:
+    #     additional_args: "--languages=c --exclude-path=\"build/CMakeFiles/**\""
+    #     log_level: info
+    #     log_verbose: false
+    #     namespace: mongodb.${{github.repository_owner}}
+    #     pr: false
+    #     scan_dependencies: true
+    #     tags: github_action
+    #   env:
+    #     ENDOR_SCAN_EMBEDDINGS: true
+
+    - name: Install endorctl
+      uses: endorlabs/github-action/setup@519df81de5f68536c84ae05ebb2986d0bb1d19fc # v1.1.8
       with:
-        additional_args: "--languages=c --exclude-path=\"build/CMakeFiles/**\""
-        log_level: info
-        log_verbose: false
         namespace: mongodb.${{github.repository_owner}}
-        pr: false
-        scan_dependencies: true
-        tags: github_action
-      env:
-        ENDOR_SCAN_EMBEDDINGS: true
+        enable_github_action_token: true
 
     - name: Set up Python 3.10
       uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
@@ -50,7 +56,7 @@ jobs:
         python-version: "3.10"
         activate-environment: true
     - name: Install dependencies
-      run: uv sync --group make_release
+      run: uv sync --group sbom
     - name: generate_sbom.py
       run: uv run etc/sbom/generate_sbom.py --enable-github-action-token --target=branch --sbom-metadata=etc/sbom/metadata.cdx.json --save-warnings=${{runner.temp}}/warnings.txt