From ba70f69f961aecfd266e6ed76972f221902b304f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Sep 2025 17:54:25 +0000 Subject: [PATCH] chore(deps): bump anchore/scan-action from 6 to 7 Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 6 to 7. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/scan-action/compare/v6...v7) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/main-security.yml | 2 +- .github/workflows/pr-security.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/main-security.yml b/.github/workflows/main-security.yml index b7f4ded..16cd79d 100644 --- a/.github/workflows/main-security.yml +++ b/.github/workflows/main-security.yml @@ -27,7 +27,7 @@ jobs: with: output-file: "${{ github.event.repository.name }}-sbom.spdx.json" - name: Scan SBOM - uses: anchore/scan-action@v6 + uses: anchore/scan-action@v7 id: scan with: sbom: "${{ github.event.repository.name }}-sbom.spdx.json" diff --git a/.github/workflows/pr-security.yml b/.github/workflows/pr-security.yml index 92c0c0c..eec4b08 100644 --- a/.github/workflows/pr-security.yml +++ b/.github/workflows/pr-security.yml @@ -42,7 +42,7 @@ jobs: with: output-file: "${{ github.event.repository.name }}-sbom.spdx.json" - name: Scan SBOM - uses: anchore/scan-action@v6 + uses: anchore/scan-action@v7 with: sbom: "${{ github.event.repository.name }}-sbom.spdx.json" fail-build: true