Merge pull request #16 from accuknox/latest-tag

add workflow to automatically update latest tag

Author: pratham-dot

.github/workflows/latest-tag.yml

@@ -0,0 +1,22 @@
+name: Update floating latest tag
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: write
+
+jobs:
+  update-latest:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Update "latest" tag
+        uses: EndBug/latest-tag@v1.6.2
+        with:
+          ref: latest
+          force-branch: false
+          description: "Auto-tag latest after ${{ github.event.release.tag_name }}"

README.md

@@ -61,7 +61,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Run AccuKnox SAST
-        uses: accuknox/sast-scan-action@v1.0.3
+        uses: accuknox/sast-scan-action@latest
         with:
           skip_sonar_scan: false
           sonar_project_key: ${{ secrets.SONAR_PROJECT_KEY }}