update the boostsec github workflow

.github/workflows/boost.yml

@@ -1,5 +1,6 @@
-name: SAST
+name: boostsecurity.io
 on:
+  workflow_dispatch:
   push:
     branches:
       - main
@@ -9,16 +10,28 @@ on:
     types:
       - opened
       - synchronize
-
 jobs:
-  boost_security_sast:
-    name: Boost Security Scanner
+  boost-sast:
+    name: SAST
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - name: Native Scanner
-        uses: boostsecurityio/boostsec-scanner-github@v3
+        uses: actions/checkout@v3
+      - name: Run Native Scanner
+        uses: boostsecurityio/boostsec-scanner-github@v4
         with:
-          action: scan
           api_token: ${{ secrets.BOOST_API_TOKEN }}
+          registry_module: boostsecurityio/native-scanner
+  boost-sbom:
+    name: SBOM
+    if: github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Upload SBOM from Trivy
+        uses: boostsecurityio/boostsec-scanner-github@v4
+        with:
+          api_token: ${{ secrets.BOOST_API_TOKEN }}
+          registry_module: boostsecurityio/trivy-sbom
+