From dee7ddb5917673f40b87294edb1e00944ebe39d0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Aug 2024 13:11:01 +0200 Subject: [PATCH] Bump the catch-all group in /.github/actions/docker-build-image with 2 updates (#724) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/actions/docker-build-image/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/docker-build-image/action.yml b/.github/actions/docker-build-image/action.yml index 042d52a57..c2251f444 100644 --- a/.github/actions/docker-build-image/action.yml +++ b/.github/actions/docker-build-image/action.yml @@ -126,7 +126,7 @@ runs: - name: Anchore Scan API Image if: inputs.grype-scan-enabled == 'true' - uses: anchore/scan-action@bc9adf64917dd9444d6cf4dd68620c34ca3a5f69 # v4.1.1 + uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5 # v4.1.2 id: scan with: fail-build: ${{ inputs.grype-fail-build }} @@ -141,7 +141,7 @@ runs: - name: Upload SARIF Files if: always() && inputs.grype-scan-enabled == 'true' && github.event_name == 'push' - uses: github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2 + uses: github/codeql-action/upload-sarif@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5 continue-on-error: true # do not fail if GHAS is not enabled with: sarif_file: ${{ steps.scan.outputs.sarif }}