Skip to content

Commit afce35a

Browse files
[#patch](deps): Bump the actions-deps group with 5 updates (#297)
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent cf3dfa7 commit afce35a

7 files changed

Lines changed: 13 additions & 13 deletions

File tree

.github/workflows/docker-build-and-push.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -188,7 +188,7 @@ jobs:
188188
push-to-registry: true
189189
create-storage-record: ${{ startsWith(inputs.registry, 'ghcr.io') }}
190190
- name: Run Trivy Scan
191-
uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
191+
uses: aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
192192
if: inputs.scan-image
193193
with:
194194
format: sarif
@@ -199,7 +199,7 @@ jobs:
199199
output: ${{ inputs.working-directory }}/trivy_results.sarif
200200
github-pat: ${{ secrets.GITHUB_TOKEN }}
201201
- name: Generate SBOM
202-
uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
202+
uses: aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
203203
if: inputs.push
204204
with:
205205
format: spdx-json
@@ -238,7 +238,7 @@ jobs:
238238
echo -n "$(cat ./trivy_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
239239
- name: Upload results
240240
if: ${{ inputs.scan-image && inputs.upload-sarif }}
241-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
241+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
242242
with:
243243
sarif_file: ${{ inputs.working-directory }}/trivy_results.sarif
244244
category: container-security

.github/workflows/go-security-scan.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ jobs:
6161
run: |
6262
echo -n "$(cat ./gosec-results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
6363
- name: Upload results
64-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
64+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
6565
with:
6666
sarif_file: '${{ inputs.working-directory }}/gosec-results.sarif'
6767
category: sast

.github/workflows/infra-security-scan.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
enable_jobs_summary: true
6565
comments_with_queries: true
6666
- name: Upload SARIF file
67-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
67+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
6868
with:
6969
sarif_file: ${{ inputs.working-directory }}/kics_results.sarif
7070
category: devops
@@ -93,7 +93,7 @@ jobs:
9393
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9494
with:
9595
persist-credentials: false
96-
- uses: reviewdog/action-actionlint@e58ee9d111489c31395fbe4857b0be6e7635dbda # v1.70.0
96+
- uses: reviewdog/action-actionlint@0d952c597ef8459f634d7145b0b044a9699e5e43 # v1.71.0
9797
continue-on-error: true
9898
with:
9999
fail_level: any
@@ -117,7 +117,7 @@ jobs:
117117
run: |
118118
echo -n "$(cat ./zizmor_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
119119
- name: Upload SARIF file
120-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
120+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
121121
with:
122122
sarif_file: zizmor_results.sarif
123123
category: github-actions

.github/workflows/local-auto-tagger.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
persist-credentials: false
3232
- name: Get changed files for each workflow and action
3333
id: changed-files
34-
uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
34+
uses: tj-actions/changed-files@7dee1b0c1557f278e5c7dc244927139d78c0e22a # v47.0.4
3535
with:
3636
files_yaml: |
3737
cleanup-cache:

.github/workflows/rust-ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -153,7 +153,7 @@ jobs:
153153
run: |
154154
echo -n "$(cat ./clippy-results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
155155
- name: Upload results
156-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
156+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
157157
with:
158158
sarif_file: ${{ inputs.working-directory }}/clippy-results.sarif
159159
category: sast

.github/workflows/sast.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
persist-credentials: false
3232
- name: 'Dependency Review'
3333
if: github.event_name == 'pull_request'
34-
uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
34+
uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
3535
with:
3636
fail-on-severity: moderate
3737
comment-summary-in-pr: on-failure
@@ -54,7 +54,7 @@ jobs:
5454
run: |
5555
echo -n "$(cat ./sast-output.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
5656
- name: Upload SARIF file
57-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
57+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
5858
with:
5959
sarif_file: ./sast-output.sarif
6060
category: sast

.github/workflows/terraform-ci.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,7 @@ jobs:
101101
filter_mode: nofilter
102102

103103
- name: Run Trivy Scan
104-
uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
104+
uses: aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
105105
with:
106106
hide-progress: true
107107
format: sarif
@@ -117,7 +117,7 @@ jobs:
117117
run: |
118118
echo -n "$(cat ./trivy_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
119119
- name: Upload results
120-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
120+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
121121
with:
122122
sarif_file: ${{ inputs.working-directory }}/trivy_results.sarif
123123
category: devops

0 commit comments

Comments
 (0)