Skip to content

Commit ff37d1c

Browse files
committed
chore: update to latest actions
1 parent 6e777c8 commit ff37d1c

File tree

1 file changed

+3
-4
lines changed

1 file changed

+3
-4
lines changed

.github/workflows/anchore.yml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,21 +37,20 @@ jobs:
3737
runs-on: ubuntu-latest
3838
steps:
3939
- name: Checkout the code
40-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
40+
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
4141
- name: Build the Docker image
4242
run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest
4343
- name: List the Docker image
4444
run: docker image ls
4545
- name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
46-
uses: anchore/scan-action@24fd7c9060f3c96848dd1929fac8d796fb5ae4b4 # v3.3.6
46+
uses: anchore/scan-action@c35e932c2a7c572bfdb1c3dbcdadb2d4fc62418d # 3.6.1
4747
id: scan
4848
with:
4949
image: "localbuild/testimage:latest"
5050
fail-build: true
5151
- name: Upload Anchore Scan Report
5252
if: always()
53-
uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a
54-
# v2.13.4
53+
uses: github/codeql-action/upload-sarif@65c74964a9ed8c44ed9f19d4bbc5757a6a8e9ab9 # v2.16.1
5554
with:
5655
sarif_file: ${{ steps.scan.outputs.sarif }}
5756
- name: Inspect action SARIF report

0 commit comments

Comments
 (0)