-
Notifications
You must be signed in to change notification settings - Fork 7
Commit d6b5970
chore: bump anchore/scan-action from 5.2.0 to 5.2.1 (#1392)
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from
5.2.0 to 5.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/scan-action/releases">anchore/scan-action's
releases</a>.</em></p>
<blockquote>
<h2>v5.2.1</h2>
<h2>New in scan-action v5.2.1</h2>
<ul>
<li>update Grype to v0.84.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/404">#404</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>bump <code>@actions/cache</code> from 3.2.4 to 3.3.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/402">#402</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anchore/scan-action/commit/f2ba85e044c8f5e5014c9a539328a9c78d3bfa49"><code>f2ba85e</code></a>
chore(deps): update Grype to v0.84.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/404">#404</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/bf457cbbb253795a423b0cd526443e8b007f2527"><code>bf457cb</code></a>
chore(deps-dev): bump tslib from 2.8.0 to 2.8.1 (<a
href="https://redirect.github.com/anchore/scan-action/issues/401">#401</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/7a25cd7daef1def733a8ff0c6fa06649232f5750"><code>7a25cd7</code></a>
chore(deps): bump <code>@actions/cache</code> from 3.2.4 to 3.3.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/402">#402</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/cadec0e111d88a48c2eefa887434e9843f8696e5"><code>cadec0e</code></a>
chore(deps-dev): bump eslint from 9.13.0 to 9.14.0 (<a
href="https://redirect.github.com/anchore/scan-action/issues/403">#403</a>)</li>
<li><a
href="https://github.com/anchore/scan-action/commit/4c480b9679bb2fc81cf1eaa7779d363eb270e5dc"><code>4c480b9</code></a>
docs(readme): upload-sarif to v3 (<a
href="https://redirect.github.com/anchore/scan-action/issues/400">#400</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/scan-action/compare/5ed195cc06065322983cae4bb31e2a751feb86fd...f2ba85e044c8f5e5014c9a539328a9c78d3bfa49">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Case Wylie <[email protected]>1 parent 8138763 commit d6b5970Copy full SHA for d6b5970
File tree
Expand file treeCollapse file tree
1 file changed
+1
-1
lines changedFilter options
- .github/workflows
Expand file treeCollapse file tree
1 file changed
+1
-1
lines changedCollapse file: .github/workflows/container-scan.yaml
.github/workflows/container-scan.yaml
Copy file name to clipboardExpand all lines: .github/workflows/container-scan.yaml+1-1Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
31 | 31 |
| |
32 | 32 |
| |
33 | 33 |
| |
34 |
| - | |
| 34 | + | |
35 | 35 |
| |
36 | 36 |
| |
37 | 37 |
| |
|
0 commit comments