From ab3596b3fdd3a0b344af2e02ccc132468d30707f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 15 Oct 2024 21:18:35 +0000 Subject: [PATCH] github-actions(deps): bump anchore/scan-action Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 4.1.2 to 5.0.1. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/v4.1.2...v5.0.1) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- security-actions/scan-docker-image/action.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/security-actions/scan-docker-image/action.yml b/security-actions/scan-docker-image/action.yml index cde5624..5618340 100644 --- a/security-actions/scan-docker-image/action.yml +++ b/security-actions/scan-docker-image/action.yml @@ -139,7 +139,7 @@ runs: fail: true - name: Download Grype - uses: anchore/scan-action/download-grype@v4.1.2 + uses: anchore/scan-action/download-grype@v5.0.1 # Skip Cache Restoration: If skip_grype_db_cache is true, skip the restoration of the cache. # Check for any existing cache to reuse @@ -217,7 +217,7 @@ runs: # Grype is invoked first time ever # Don't fail during report generation - name: Vulnerability analysis of SBOM - uses: anchore/scan-action@v4.1.2 + uses: anchore/scan-action@v5.0.1 id: grype_analysis_sarif if: ${{ steps.sbom_report.outputs.files_exists == 'true' && steps.grype_db_check_updates.outputs.GRYPE_DB_UPDATE_STATUS == 0 }} with: @@ -232,7 +232,7 @@ runs: # Don't fail during report generation # JSON format will report any ignored rules - name: Vulnerability analysis of SBOM - uses: anchore/scan-action@v4.1.2 + uses: anchore/scan-action@v5.0.1 id: grype_analysis_json if: ${{ steps.sbom_report.outputs.files_exists == 'true' && steps.grype_db_check_updates.outputs.GRYPE_DB_UPDATE_STATUS == 0 }} with: @@ -284,7 +284,7 @@ runs: # Notify grype quick scan results in table format # Table format will supress any specified ignore rules - name: Inspect Vulnerability analysis of SBOM - uses: anchore/scan-action@v4.1.2 + uses: anchore/scan-action@v5.0.1 if: ${{ steps.sbom_report.outputs.files_exists == 'true' && steps.grype_db_check_updates.outputs.GRYPE_DB_UPDATE_STATUS == 0 }} with: sbom: ${{ steps.meta.outputs.sbom_spdx_file }}