|
57 | 57 | env: |
58 | 58 | IMAGE_ID: ${{ steps.build.outputs.imageid }} |
59 | 59 |
|
60 | | - - uses: quay/clair-action@0c6fa2fbaa17fd9b5455347d8c28169804460f58 # V0 |
| 60 | + - uses: quay/clair-action@526ec1b38497f85e7f2de98d264ef94fdfb38913 # V0 |
61 | 61 | with: |
62 | 62 | image-path: ${{ github.sha }} |
63 | 63 | output: clair_results.sarif |
@@ -125,7 +125,7 @@ jobs: |
125 | 125 | - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 |
126 | 126 |
|
127 | 127 | - id: grype |
128 | | - uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0 # v7 |
| 128 | + uses: anchore/scan-action@3c9a191a0fbab285ca6b8530b5de5a642cba332f # v7 |
129 | 129 | with: |
130 | 130 | path: . |
131 | 131 | fail-build: ${{ github.event_name == 'pull_request' }} |
@@ -155,7 +155,7 @@ jobs: |
155 | 155 | load: true |
156 | 156 |
|
157 | 157 | - id: grype |
158 | | - uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0 # v7 |
| 158 | + uses: anchore/scan-action@3c9a191a0fbab285ca6b8530b5de5a642cba332f # v7 |
159 | 159 | with: |
160 | 160 | image: ${{ env.IMAGE_ID }} |
161 | 161 | fail-build: ${{ github.event_name == 'pull_request' }} |
@@ -292,13 +292,13 @@ jobs: |
292 | 292 | steps: |
293 | 293 | - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 |
294 | 294 |
|
295 | | - - uses: anchore/sbom-action@fbfd9c6c189226748411491745178e0c2017392d # v0 |
| 295 | + - uses: anchore/sbom-action@43a17d6e7add2b5535efe4dcae9952337c479a93 # v0 |
296 | 296 | with: |
297 | 297 | output-file: "${{ github.event.repository.name }}-sbom.spdx.json" |
298 | 298 | dependency-snapshot: true |
299 | 299 |
|
300 | 300 | - id: grype |
301 | | - uses: anchore/scan-action@40a61b52209e9d50e87917c5b901783d546b12d0 # v7 |
| 301 | + uses: anchore/scan-action@3c9a191a0fbab285ca6b8530b5de5a642cba332f # v7 |
302 | 302 | with: |
303 | 303 | sbom: "${{ github.event.repository.name }}-sbom.spdx.json" |
304 | 304 | fail-build: ${{ github.event_name == 'pull_request' }} |
|
0 commit comments