fix the cve GHSA-v778-237x-gjrc

Signed-off-by: Batuhan Apaydin <[email protected]>
wolfi-dev · Dec 14, 2024 · 1499d46 · 1499d46
1 parent 69c50ef
commit 1499d46
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/vendir.yaml b/vendir.yaml
@@ -13,6 +13,10 @@ pipeline:
       repository: https://github.com/carvel-dev/vendir
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+
   - uses: go/build
     with:
       packages: ./cmd/vendir