Skip to content

Commit d6b5970

Browse files
chore: bump anchore/scan-action from 5.2.0 to 5.2.1 (#1392)
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 5.2.0 to 5.2.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/anchore/scan-action/releases">anchore/scan-action's releases</a>.</em></p> <blockquote> <h2>v5.2.1</h2> <h2>New in scan-action v5.2.1</h2> <ul> <li>update Grype to v0.84.0 (<a href="https://redirect.github.com/anchore/scan-action/issues/404">#404</a>) [<a href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li> <li>bump <code>@​actions/cache</code> from 3.2.4 to 3.3.0 (<a href="https://redirect.github.com/anchore/scan-action/issues/402">#402</a>) [<a href="https://github.com/dependabot">dependabot</a>]</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/anchore/scan-action/commit/f2ba85e044c8f5e5014c9a539328a9c78d3bfa49"><code>f2ba85e</code></a> chore(deps): update Grype to v0.84.0 (<a href="https://redirect.github.com/anchore/scan-action/issues/404">#404</a>)</li> <li><a href="https://github.com/anchore/scan-action/commit/bf457cbbb253795a423b0cd526443e8b007f2527"><code>bf457cb</code></a> chore(deps-dev): bump tslib from 2.8.0 to 2.8.1 (<a href="https://redirect.github.com/anchore/scan-action/issues/401">#401</a>)</li> <li><a href="https://github.com/anchore/scan-action/commit/7a25cd7daef1def733a8ff0c6fa06649232f5750"><code>7a25cd7</code></a> chore(deps): bump <code>@​actions/cache</code> from 3.2.4 to 3.3.0 (<a href="https://redirect.github.com/anchore/scan-action/issues/402">#402</a>)</li> <li><a href="https://github.com/anchore/scan-action/commit/cadec0e111d88a48c2eefa887434e9843f8696e5"><code>cadec0e</code></a> chore(deps-dev): bump eslint from 9.13.0 to 9.14.0 (<a href="https://redirect.github.com/anchore/scan-action/issues/403">#403</a>)</li> <li><a href="https://github.com/anchore/scan-action/commit/4c480b9679bb2fc81cf1eaa7779d363eb270e5dc"><code>4c480b9</code></a> docs(readme): upload-sarif to v3 (<a href="https://redirect.github.com/anchore/scan-action/issues/400">#400</a>)</li> <li>See full diff in <a href="https://github.com/anchore/scan-action/compare/5ed195cc06065322983cae4bb31e2a751feb86fd...f2ba85e044c8f5e5014c9a539328a9c78d3bfa49">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/scan-action&package-manager=github_actions&previous-version=5.2.0&new-version=5.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Case Wylie <[email protected]>
1 parent 8138763 commit d6b5970

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/container-scan.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: Build Pepr Controller Image
3232
run: npm run build:image
3333
- name: Vulnerability Scan
34-
uses: anchore/scan-action@5ed195cc06065322983cae4bb31e2a751feb86fd # v5.2.0
34+
uses: anchore/scan-action@f2ba85e044c8f5e5014c9a539328a9c78d3bfa49 # v5.2.1
3535
with:
3636
image: "pepr:dev"
3737
fail-build: true

0 commit comments

Comments
 (0)