From 941131f7a92290e26c74d6f10d6a5fd487d7787b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Oct 2024 01:38:12 +0000 Subject: [PATCH] build(deps): bump anchore/scan-action from 4 to 5 Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 4 to 5. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/v4...v5) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/scan.yml | 8 ++++---- .github/workflows/scan_released.yml | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 3241946ae..7607f1d53 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -20,7 +20,7 @@ jobs: # NOTE: Scan first without failing, else we won't be able to read the scan # report. - name: Scan container image (no fail) - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 id: scan_container with: image: "dangerzone.rocks/dangerzone:latest" @@ -35,7 +35,7 @@ jobs: - name: Inspect container scan report run: cat ${{ steps.scan_container.outputs.sarif }} - name: Scan container image - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 with: image: "dangerzone.rocks/dangerzone:latest" fail-build: true @@ -50,7 +50,7 @@ jobs: # NOTE: Scan first without failing, else we won't be able to read the scan # report. - name: Scan application (no fail) - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 id: scan_app with: path: "." @@ -65,7 +65,7 @@ jobs: - name: Inspect application scan report run: cat ${{ steps.scan_app.outputs.sarif }} - name: Scan application - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 with: path: "." fail-build: true diff --git a/.github/workflows/scan_released.yml b/.github/workflows/scan_released.yml index 4b6b47623..0a33ac6c5 100644 --- a/.github/workflows/scan_released.yml +++ b/.github/workflows/scan_released.yml @@ -19,7 +19,7 @@ jobs: # NOTE: Scan first without failing, else we won't be able to read the scan # report. - name: Scan container image (no fail) - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 id: scan_container with: image: "dangerzone.rocks/dangerzone:latest" @@ -34,7 +34,7 @@ jobs: - name: Inspect container scan report run: cat ${{ steps.scan_container.outputs.sarif }} - name: Scan container image - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 with: image: "dangerzone.rocks/dangerzone:latest" fail-build: true @@ -55,7 +55,7 @@ jobs: # NOTE: Scan first without failing, else we won't be able to read the scan # report. - name: Scan application (no fail) - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 id: scan_app with: path: "." @@ -70,7 +70,7 @@ jobs: - name: Inspect application scan report run: cat ${{ steps.scan_app.outputs.sarif }} - name: Scan application - uses: anchore/scan-action@v4 + uses: anchore/scan-action@v5 with: path: "." fail-build: true