8080
8181 - name : Authenticate to Google Cloud
8282 id : auth
83- uses : google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
83+ uses : google-github-actions/auth@140bb5113ffb6b65a7e9b937a81fa96cf5064462 # v2.1.11
8484 with :
8585 token_format : access_token
8686 workload_identity_provider : ${{ secrets.GCR_WORKLOAD_IDENTITY }}
@@ -143,7 +143,7 @@ jobs:
143143 fi
144144
145145 - name : Upload SARIF file
146- uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
146+ uses : github/codeql-action/upload-sarif@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
147147 if : steps.check-sarif.outputs.sarif_has_results == 'true'
148148 with :
149149 sarif_file : govulncheck.sarif
@@ -420,7 +420,7 @@ jobs:
420420
421421 - name : Authenticate to Google Cloud
422422 id : auth
423- uses : google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
423+ uses : google-github-actions/auth@140bb5113ffb6b65a7e9b937a81fa96cf5064462 # v2.1.11
424424 with :
425425 token_format : access_token
426426 workload_identity_provider : ${{ secrets.GCR_WORKLOAD_IDENTITY }}
@@ -450,7 +450,7 @@ jobs:
450450
451451 - name : Run Docker Scout vulnerability scanner
452452 id : docker-scout
453- uses : docker/scout-action@aceeb83b88f2ae54376891227858dda7af647183 # v1.18.1
453+ uses : docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
454454 with :
455455 command : cves
456456 image : ${{ steps.meta.outputs.tags }}
@@ -468,7 +468,7 @@ jobs:
468468 overwrite : true
469469
470470 - name : Upload Scan results to GitHub Security tab
471- uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
471+ uses : github/codeql-action/upload-sarif@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
472472 with :
473473 sarif_file : " ${{ steps.directory.outputs.directory }}/"
474474
@@ -509,7 +509,7 @@ jobs:
509509
510510 - name : Authenticate to Google Cloud
511511 id : auth
512- uses : google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
512+ uses : google-github-actions/auth@140bb5113ffb6b65a7e9b937a81fa96cf5064462 # v2.1.11
513513 with :
514514 token_format : access_token
515515 workload_identity_provider : ${{ secrets.GCR_WORKLOAD_IDENTITY }}
@@ -539,7 +539,7 @@ jobs:
539539
540540 - name : Run Docker Scout vulnerability scanner
541541 id : docker-scout
542- uses : docker/scout-action@aceeb83b88f2ae54376891227858dda7af647183 # v1.18.1
542+ uses : docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
543543 with :
544544 command : cves
545545 image : ${{ steps.meta.outputs.tags }}
@@ -557,7 +557,7 @@ jobs:
557557 overwrite : true
558558
559559 - name : Upload Scan results to GitHub Security tab
560- uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
560+ uses : github/codeql-action/upload-sarif@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
561561 with :
562562 sarif_file : " ${{ steps.directory.outputs.directory }}/"
563563
@@ -605,7 +605,7 @@ jobs:
605605
606606 - name : Authenticate to Google Cloud
607607 id : auth
608- uses : google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
608+ uses : google-github-actions/auth@140bb5113ffb6b65a7e9b937a81fa96cf5064462 # v2.1.11
609609 with :
610610 token_format : access_token
611611 workload_identity_provider : ${{ secrets.GCR_WORKLOAD_IDENTITY }}
@@ -635,7 +635,7 @@ jobs:
635635
636636 - name : Run Docker Scout vulnerability scanner
637637 id : docker-scout
638- uses : docker/scout-action@aceeb83b88f2ae54376891227858dda7af647183 # v1.18.1
638+ uses : docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1.18.2
639639 with :
640640 command : cves
641641 image : ${{ steps.meta.outputs.tags }}
@@ -653,7 +653,7 @@ jobs:
653653 overwrite : true
654654
655655 - name : Upload Scan results to GitHub Security tab
656- uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
656+ uses : github/codeql-action/upload-sarif@d6bbdef45e766d081b84a2def353b0055f728d3e # v3.29.3
657657 with :
658658 sarif_file : " ${{ steps.directory.outputs.directory }}/"
659659 continue-on-error : true
0 commit comments