Fix anchore syft sbom generation
currently the data is wrapped in quotes inside the file.
Untested, but I think this fixes it. Let subprocess write directly to the file
Alternately update syft and use this new feature: https://github.com/anchore/syft/pull/732. This would actually be preferred, I'd like both SPDX and CycloneDX if possible.