mirror of
https://github.com/truecharts/charts.git
synced 2026-07-08 08:01:21 -03:00
chore(github-action): update anchore/sbom-action action v0.20.5 → v0.20.6 (#39583)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action) | action | patch | `da167ea` -> `f8bdd1d` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>anchore/sbom-action (anchore/sbom-action)</summary> ### [`v0.20.6`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.20.6) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.20.5...v0.20.6) #### Changes in v0.20.6 - chore(deps): update Syft to v1.33.0 ([#​537](https://redirect.github.com/anchore/sbom-action/issues/537)) \[\[[anchore-actions-token-generator\[bot\]](https://redirect.github.com/apps/anchore-actions-token-generator)]\(<https://github.com/>[anchore-actions-token-generator\[bot\]](https://redirect.github.com/apps/anchore-actions-token-generator))] - chore: update actions library to resolve critical vulnerability ([#​536](https://redirect.github.com/anchore/sbom-action/issues/536)) \[[spiffcs](https://redirect.github.com/spiffcs)] </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iLCJyZW5vdmF0ZS9naXRodWItcmVsZWFzZSIsInR5cGUvcGF0Y2giXX0=-->
This commit is contained in:
2
.github/workflows/containers.build.yaml
vendored
2
.github/workflows/containers.build.yaml
vendored
@@ -195,7 +195,7 @@ jobs:
|
||||
- uses: sigstore/cosign-installer@main
|
||||
|
||||
- name: Install Syft
|
||||
uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
|
||||
uses: anchore/sbom-action/download-syft@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # v0.20.6
|
||||
|
||||
- name: Login to Quay
|
||||
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
|
||||
|
||||
Reference in New Issue
Block a user