Wrong sbom attestion pushed when multiple images are built in parallel

Same as #129 (closed) but for SBOM 😭