NODE-7025: Only looking at package lock

Author: ekovalets

.github/actions/sbom-update/action.yml

@@ -14,7 +14,7 @@ runs:
       working-directory: ${{ inputs.working-directory }}
       run: |
         echo "Generating SBOM for 'node' project..."
-        npx @cyclonedx/cyclonedx-npm --omit dev --output-file sbom.json --output-format json --spec-version 1.5
+        npx @cyclonedx/cyclonedx-npm --package-lock-only--omit dev --output-file sbom.json --output-format json --spec-version 1.5
 
     - name: Validate SBOM
       shell: bash