fix: Refer to scan-ref when scan-type is "sbom" (#314)

fix: Refer to scan-ref when scan-type is "sbom" (#314) #386