From 04c389de0f435254d7328f01acb7d6857b54c09a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 24 May 2024 12:48:41 +0200 Subject: [PATCH] chore(deps): bump adfinis/container-scanning-action from 0.2.3 to 0.2.7 (#213) Bumps [adfinis/container-scanning-action](https://github.com/adfinis/container-scanning-action) from 0.2.3 to 0.2.7. - [Release notes](https://github.com/adfinis/container-scanning-action/releases) - [Commits](https://github.com/adfinis/container-scanning-action/compare/v0.2.3...v0.2.7) --- updated-dependencies: - dependency-name: adfinis/container-scanning-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/release.yaml | 4 ++-- .github/workflows/schedule.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index c139d982b..f4b6a2a3b 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -100,7 +100,7 @@ jobs: ${{ steps.meta.outputs.labels }} - name: Sign backend image and attach SBOM attestation - uses: adfinis/container-scanning-action@v0.2.3 + uses: adfinis/container-scanning-action@v0.2.7 with: image-ref: ghcr.io/${{ github.repository }}/backend token: ${{ secrets.GITHUB_TOKEN }} @@ -173,7 +173,7 @@ jobs: ${{ steps.meta.outputs.labels }} - name: Sign image and attach SBOM attestation - uses: adfinis/container-scanning-action@v0.2.3 + uses: adfinis/container-scanning-action@v0.2.7 with: image-ref: ghcr.io/${{ github.repository }}/frontend token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/schedule.yaml b/.github/workflows/schedule.yaml index bfc8de4ea..6c43938f2 100644 --- a/.github/workflows/schedule.yaml +++ b/.github/workflows/schedule.yaml @@ -24,7 +24,7 @@ jobs: # needed for `cosign attest` id-token: write steps: - - uses: adfinis/container-scanning-action@v0.2.3 + - uses: adfinis/container-scanning-action@v0.2.7 with: image-ref: ghcr.io/${{ github.repository }}/backend attest: true @@ -47,7 +47,7 @@ jobs: # needed for `cosign attest` id-token: write steps: - - uses: adfinis/container-scanning-action@v0.2.3 + - uses: adfinis/container-scanning-action@v0.2.7 with: image-ref: ghcr.io/${{ github.repository }}/frontend attest: true