NRL-1417 SBOM step needs docker in action image

Author: anjalitrace2-nhs

.github/workflows/daily-build.yml

@@ -38,11 +38,6 @@ jobs:
       - name: Run Unit Tests
         run: make test
 
-      - name: Generate SBOM
-        uses: nhs-england-tools/trivy-action/sbom-scan@v1.4.0
-        with:
-          repo-path: "./"
-
       - name: Build Project
         run: make build
 
@@ -72,3 +67,18 @@ jobs:
         with:
           key: ${{ github.run_id }}-nrlf-permissions
           path: dist/nrlf_permissions.zip
+
+  sbom:
+    name: Generate SBOM - ${{ github.ref }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Git clone - ${{ github.ref }}
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Generate SBOM
+        uses: nhs-england-tools/trivy-action/sbom-scan@v1.4.0
+        with:
+          repo-path: "./"

.github/workflows/pr-env-deploy.yml

@@ -69,11 +69,6 @@ jobs:
       - name: Build Project
         run: make build
 
-      - name: Generate SBOM
-        uses: nhs-england-tools/trivy-action/sbom-scan@v1.4.0
-        with:
-          repo-path: "./"
-
       - name: Configure Management Credentials
         uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a #v4.3.1
         with: