From 31e5e88640ff928ce78ace33a8c864db892fec50 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 16 Oct 2024 20:54:36 +0000 Subject: [PATCH] Bump the actions group with 3 updates Bumps the actions group with 3 updates: [actions/dependency-review-action](https://github.com/actions/dependency-review-action), [actions/github-script](https://github.com/actions/github-script) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `actions/dependency-review-action` from 3 to 4 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v3...v4) Updates `actions/github-script` from 6 to 7 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v6...v7) Updates `aquasecurity/trivy-action` from 0.26.0 to 0.28.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.26.0...0.28.0) --- updated-dependencies: - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dependency-review.yaml | 2 +- .github/workflows/output-code-coverage.yaml | 2 +- .github/workflows/trivy-containers.yaml | 2 +- .github/workflows/trivy.yaml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index d06490845d..3884db4d6a 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -26,4 +26,4 @@ jobs: uses: actions/checkout@v4 - name: 'Dependency Review' - uses: actions/dependency-review-action@v3 + uses: actions/dependency-review-action@v4 diff --git a/.github/workflows/output-code-coverage.yaml b/.github/workflows/output-code-coverage.yaml index e870816fac..09cc0889cb 100644 --- a/.github/workflows/output-code-coverage.yaml +++ b/.github/workflows/output-code-coverage.yaml @@ -30,7 +30,7 @@ jobs: steps: # https://docs.github.com/en/actions/using-workflows/events-that-trigger-workflows#using-data-from-the-triggering-workflow - name: 'Download reports' - uses: actions/github-script@v6 + uses: actions/github-script@v7 with: script: | let fs = require('fs'); diff --git a/.github/workflows/trivy-containers.yaml b/.github/workflows/trivy-containers.yaml index d60cc9b0ec..cf3fba6851 100644 --- a/.github/workflows/trivy-containers.yaml +++ b/.github/workflows/trivy-containers.yaml @@ -68,7 +68,7 @@ jobs: run: docker pull ${{ matrix.image }} - name: Scan container image - uses: aquasecurity/trivy-action@0.26.0 + uses: aquasecurity/trivy-action@0.28.0 with: image-ref: '${{ matrix.image }}' output: 'results.sarif' diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml index c7848779b6..f42fa42e6d 100644 --- a/.github/workflows/trivy.yaml +++ b/.github/workflows/trivy.yaml @@ -32,7 +32,7 @@ jobs: uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.26.0 + uses: aquasecurity/trivy-action@0.28.0 with: scan-type: 'fs' ignore-unfixed: true