From e2b9a748a2e510efbca912ba1bbfd7ee6e740c41 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Dec 2023 15:24:56 +0000 Subject: [PATCH] Bump anchore/sbom-action Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from ace0b9722a703812d78949ee4ac5b90de1c0eba2 to 5ecf649a417b8ae17dc8383dc32d46c03f2312df. - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](https://github.com/anchore/sbom-action/compare/ace0b9722a703812d78949ee4ac5b90de1c0eba2...5ecf649a417b8ae17dc8383dc32d46c03f2312df) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/super-devsecops.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/super-devsecops.yml b/.github/workflows/super-devsecops.yml index 9b9a9ac..90e297c 100644 --- a/.github/workflows/super-devsecops.yml +++ b/.github/workflows/super-devsecops.yml @@ -39,7 +39,7 @@ jobs: - name: Checkout the code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Scan the source code and upload dependency results - uses: anchore/sbom-action@ace0b9722a703812d78949ee4ac5b90de1c0eba2 + uses: anchore/sbom-action@5ecf649a417b8ae17dc8383dc32d46c03f2312df with: path: . dependency-snapshot: true @@ -199,7 +199,7 @@ jobs: docker build -t ghcr.io/stormsinbrewing/savvy-devsecops . docker push ghcr.io/stormsinbrewing/savvy-devsecops - name: Image SBOM Scan with Syft - uses: anchore/sbom-action@ace0b9722a703812d78949ee4ac5b90de1c0eba2 + uses: anchore/sbom-action@5ecf649a417b8ae17dc8383dc32d46c03f2312df with: image: "ghcr.io/stormsinbrewing/savvy-devsecops" dependency-snapshot: true