Skip to content

Commit c44c741

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the dependencies group across 1 directory with 12 updates
Bumps the dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `6.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.7.0` | `5.8.0` | | [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) | `4.0.2` | `5.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.2` | `4.31.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.7.1` | `5.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` | | [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action) | `2.1.11` | `2.1.15` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5.5.3` | `6.1.1` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.32.0` | `0.33.1` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.90.1` | `3.90.11` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `actions/setup-node` from 4.4.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...2028fbc) Updates `docker/login-action` from 3.4.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@74a5d14...5e57cd1) Updates `docker/metadata-action` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@902fa8e...c1e5197) Updates `peter-evans/dockerhub-description` from 4.0.2 to 5.0.0 - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@432a30c...1b9a80c) Updates `github/codeql-action` from 3.29.2 to 4.31.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@181d5ee...4e94bd1) Updates `actions/setup-java` from 4.7.1 to 5.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@c5195ef...dded088) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) Updates `checkmarx/kics-github-action` from 2.1.11 to 2.1.15 - [Release notes](https://github.com/checkmarx/kics-github-action/releases) - [Commits](Checkmarx/kics-github-action@3545b74...86775e4) Updates `amannn/action-semantic-pull-request` from 5.5.3 to 6.1.1 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@0723387...48f2562) Updates `aquasecurity/trivy-action` from 0.32.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@dc5a429...b6643a2) Updates `trufflesecurity/trufflehog` from 3.90.1 to 3.90.11 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml) - [Commits](trufflesecurity/trufflehog@907ac64...ad6fc8f) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/setup-node dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: docker/metadata-action dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: peter-evans/dockerhub-description dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: 4.31.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: checkmarx/kics-github-action dependency-version: 2.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: amannn/action-semantic-pull-request dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: trufflesecurity/trufflehog dependency-version: 3.90.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
1 parent 855e0d3 commit c44c741

File tree

12 files changed

+48
-48
lines changed

12 files changed

+48
-48
lines changed

‎.github/workflows/build.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,10 @@ jobs:
4343

4444
steps:
4545
- name: Checkout repository
46-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
46+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4747

4848
- name: Setup Node
49-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
49+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
5050
with:
5151
node-version: 20
5252
registry-url: https://registry.npmjs.org/
@@ -74,14 +74,14 @@ jobs:
7474

7575
- name: Login to DockerHub
7676
if: github.event_name != 'pull_request'
77-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
77+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
7878
with:
7979
username: ${{ secrets.DOCKER_HUB_USER }}
8080
password: ${{ secrets.DOCKER_HUB_TOKEN }}
8181

8282
- name: Docker meta
8383
id: meta
84-
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
84+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
8585
with:
8686
images: ${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}
8787
tags: |
@@ -101,7 +101,7 @@ jobs:
101101
# https://github.com/peter-evans/dockerhub-description
102102
- name: Update Docker Hub description
103103
if: github.event_name != 'pull_request'
104-
uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2
104+
uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
105105
with:
106106
username: ${{ secrets.DOCKER_HUB_USER }}
107107
password: ${{ secrets.DOCKER_HUB_TOKEN }}

‎.github/workflows/checks.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,10 +31,10 @@ jobs:
3131

3232
steps:
3333
- name: Checkout repository
34-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
34+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3535

3636
- name: Setup Node
37-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
37+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3838
with:
3939
node-version: 20
4040
registry-url: https://registry.npmjs.org/

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,11 +71,11 @@ jobs:
7171

7272
steps:
7373
- name: Checkout repository
74-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
74+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7575

7676
# Initializes the CodeQL tools for scanning.
7777
- name: Initialize CodeQL
78-
uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v2.227
78+
uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v2.227
7979
with:
8080
languages: ${{ matrix.language }}
8181
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -89,7 +89,7 @@ jobs:
8989
# Automates dependency installation for Python, Ruby, and JavaScript, optimizing the CodeQL analysis setup.
9090
# If this step fails, then you should remove it and run the build manually (see below)
9191
- name: Autobuild
92-
uses: github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b # v2.227
92+
uses: github/codeql-action/autobuild@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v2.227
9393

9494
# ℹ️ Command-line programs to run using the OS shell.
9595
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -102,6 +102,6 @@ jobs:
102102
# ./location_of_script_within_repo/buildscript.sh
103103

104104
- name: Perform CodeQL Analysis
105-
uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v2.227
105+
uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v2.227
106106
with:
107107
category: '/language:${{matrix.language}}'

‎.github/workflows/dependencies.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,13 +40,13 @@ jobs:
4040

4141
steps:
4242
- name: Set up JDK 17
43-
uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
43+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
4444
with:
4545
distribution: 'temurin'
4646
java-version: '17'
4747

4848
- name: Checkout repository
49-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
49+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5050

5151
- name: Generate Dependencies file
5252
run: java -jar ./scripts/download/org.eclipse.dash.licenses-1.1.1.jar yarn.lock -project automotive.tractusx -summary DEPENDENCIES || true
@@ -72,7 +72,7 @@ jobs:
7272
fi
7373
7474
- name: Upload DEPENDENCIES file
75-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
75+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
7676
with:
7777
path: DEPENDENCIES
7878
if: steps.dependencies-changed.outputs.changed == 'true'

‎.github/workflows/kics.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,10 +42,10 @@ jobs:
4242
security-events: write
4343

4444
steps:
45-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
45+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4646

4747
- name: KICS scan
48-
uses: checkmarx/kics-github-action@3545b741daf8fc816b081261995184aa12a247c0 # v2.1.11
48+
uses: checkmarx/kics-github-action@86775e425429260b2044a0611f3031e0a0f71b0b # v2.1.15
4949
with:
5050
# Scanning directory .
5151
path: '.'
@@ -67,6 +67,6 @@ jobs:
6767
# Upload findings to GitHub Advanced Security Dashboard
6868
- name: Upload SARIF file for GitHub Advanced Security Dashboard
6969
if: always()
70-
uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
70+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
7171
with:
7272
sarif_file: kicsResults/results.sarif

‎.github/workflows/pullRequest-lint.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
name: Validate PR title
3232
runs-on: ubuntu-latest
3333
steps:
34-
- uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5.5.3
34+
- uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
3535
id: lint_pr_title
3636
env:
3737
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/release-release_candidate.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,10 @@ jobs:
4343

4444
steps:
4545
- name: Checkout repository
46-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
46+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4747

4848
- name: Setup Node
49-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
49+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
5050
with:
5151
node-version: 20
5252
registry-url: https://registry.npmjs.org/
@@ -90,14 +90,14 @@ jobs:
9090

9191
- name: Login to DockerHub
9292
if: github.event_name != 'pull_request'
93-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
93+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
9494
with:
9595
username: ${{ secrets.DOCKER_HUB_USER }}
9696
password: ${{ secrets.DOCKER_HUB_TOKEN }}
9797

9898
- name: Docker meta
9999
id: meta
100-
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
100+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
101101
with:
102102
images:
103103
${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}
@@ -123,7 +123,7 @@ jobs:
123123
# https://github.com/peter-evans/dockerhub-description
124124
- name: Update Docker Hub description
125125
if: github.event_name != 'pull_request'
126-
uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2
126+
uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
127127
with:
128128
username: ${{ secrets.DOCKER_HUB_USER }}
129129
password: ${{ secrets.DOCKER_HUB_TOKEN }}

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -44,10 +44,10 @@ jobs:
4444

4545
steps:
4646
- name: Checkout repository
47-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
47+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4848

4949
- name: Setup Node
50-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
50+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
5151
with:
5252
node-version: 20
5353
registry-url: https://registry.npmjs.org/
@@ -91,14 +91,14 @@ jobs:
9191

9292
- name: Login to DockerHub
9393
if: github.event_name != 'pull_request'
94-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
94+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
9595
with:
9696
username: ${{ secrets.DOCKER_HUB_USER }}
9797
password: ${{ secrets.DOCKER_HUB_TOKEN }}
9898

9999
- name: Docker meta
100100
id: meta
101-
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
101+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
102102
with:
103103
images:
104104
${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}
@@ -124,7 +124,7 @@ jobs:
124124
# https://github.com/peter-evans/dockerhub-description
125125
- name: Update Docker Hub description
126126
if: github.event_name != 'pull_request'
127-
uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2
127+
uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
128128
with:
129129
username: ${{ secrets.DOCKER_HUB_USER }}
130130
password: ${{ secrets.DOCKER_HUB_TOKEN }}
@@ -140,7 +140,7 @@ jobs:
140140
run: echo "RELEASE_VERSION=${{ env.REF_NAME }}" >> $GITHUB_ENV
141141

142142
- name: Checkout repository
143-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
143+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
144144

145145
- name: Check for hotfix version
146146
id: hf-check

‎.github/workflows/release_candidate.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,10 +43,10 @@ jobs:
4343

4444
steps:
4545
- name: Checkout repository
46-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
46+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4747

4848
- name: Setup Node
49-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
49+
uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
5050
with:
5151
node-version: 20
5252
registry-url: https://registry.npmjs.org/
@@ -71,14 +71,14 @@ jobs:
7171

7272
- name: Login to DockerHub
7373
if: github.event_name != 'pull_request'
74-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
74+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
7575
with:
7676
username: ${{ secrets.DOCKER_HUB_USER }}
7777
password: ${{ secrets.DOCKER_HUB_TOKEN }}
7878

7979
- name: Docker meta
8080
id: meta
81-
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
81+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
8282
with:
8383
images: ${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}
8484
tags: |
@@ -98,7 +98,7 @@ jobs:
9898
# https://github.com/peter-evans/dockerhub-description
9999
- name: Update Docker Hub description
100100
if: github.event_name != 'pull_request'
101-
uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2
101+
uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
102102
with:
103103
username: ${{ secrets.DOCKER_HUB_USER }}
104104
password: ${{ secrets.DOCKER_HUB_TOKEN }}

‎.github/workflows/trivy-main.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -51,10 +51,10 @@ jobs:
5151

5252
steps:
5353
- name: Checkout repository
54-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
54+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5555

5656
- name: Run Trivy vulnerability scanner in repo mode
57-
uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # v0.32.0
57+
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
5858
with:
5959
scan-type: 'config'
6060
hide-progress: false
@@ -66,7 +66,7 @@ jobs:
6666
limit-severities-for-sarif: true
6767

6868
- name: Upload Trivy scan results to GitHub Security tab
69-
uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
69+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
7070
if: always()
7171
with:
7272
sarif_file: 'trivy-results1.sarif'
@@ -80,7 +80,7 @@ jobs:
8080

8181
steps:
8282
- name: Checkout repository
83-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
83+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
8484

8585
# It's also possible to scan your private registry with Trivy's built-in image scan.
8686
# All you have to do is set ENV vars.
@@ -89,7 +89,7 @@ jobs:
8989
# For public images, no ENV vars must be set.
9090
- name: Run Trivy vulnerability scanner
9191
if: always()
92-
uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # v0.32.0
92+
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # v0.33.1
9393
with:
9494
# Path to Docker image
9595
image-ref: '${{ env.IMAGE_NAMESPACE }}/${{ env.IMAGE_NAME }}:main'
@@ -103,6 +103,6 @@ jobs:
103103

104104
- name: Upload Trivy scan results to GitHub Security tab
105105
if: always()
106-
uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
106+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
107107
with:
108108
sarif_file: 'trivy-results2.sarif'

0 commit comments

Comments
 (0)