chore: add sbom workflow

[qevolg]

Description

chore: add sbom workflow

Issue(s)

• close: https://project.feishu.cn/taosdata_td/feature/detail/6796766084

Checklist

Please check the items in the checklist if applicable.

• Is the user manual updated?
• Are the test cases passed and automated?
• Is there no significant decrease in test coverage?

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!

[Copilot]

Pull request overview

Adds a GitHub Actions workflow to generate a CycloneDX SBOM for taos-ws-py and scan it with Anchore on PRs and releases.

Changes:

• Introduce new .github/workflows/taos-ws-py-sbom.yml workflow.
• Generate SBOM via anchore/sbom-action and scan it via anchore/scan-action.
• Upload the generated SBOM as a workflow artifact.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.95%. Comparing base (b3f7204) to head (8ec1946).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #384   +/-   ##
=======================================
  Coverage   81.95%   81.95%           
=======================================
  Files          24       24           
  Lines        3713     3713           
=======================================
  Hits         3043     3043           
  Misses        670      670           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 5 changed files in this pull request and generated 7 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.