From ae6f4510b15b999add9328be397f7547652663e6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 5 Nov 2024 19:03:32 +0000 Subject: [PATCH] Bump anchore/scan-action from 4.1.2 to 5.2.1 Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 4.1.2 to 5.2.1. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/64a33b277ea7a1215a3c142735a1091341939ff5...f2ba85e044c8f5e5014c9a539328a9c78d3bfa49) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eb0e550..d4c2a07 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,7 +54,7 @@ jobs: output-file: "${{ github.event.repository.name }}-sbom.spdx.json" - name: Scan SBOM - uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5 + uses: anchore/scan-action@f2ba85e044c8f5e5014c9a539328a9c78d3bfa49 with: sbom: "${{ github.event.repository.name }}-sbom.spdx.json"