From a760d1073287f716e32fafd521299567bcbc8165 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 18 Dec 2023 14:49:43 +0000 Subject: [PATCH] chore(deps): update cds-snc/security-tools action to v3 --- .github/workflows/build_and_push.yml | 2 +- .github/workflows/docker-vulnerability-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build_and_push.yml b/.github/workflows/build_and_push.yml index b998469f..14256f30 100644 --- a/.github/workflows/build_and_push.yml +++ b/.github/workflows/build_and_push.yml @@ -73,7 +73,7 @@ jobs: docker push $REGISTRY/${{ matrix.image }}:latest - name: Generate ${{ matrix.image }} docker SBOM - uses: cds-snc/security-tools/.github/actions/generate-sbom@eecd7a02a0294b379411c126b61e5c29e253676a # v2.1.4 + uses: cds-snc/security-tools/.github/actions/generate-sbom@d6bb182e15f0cad80e7625887ae88e5830728aab # v3.0.0 with: docker_image: ${{ env.REGISTRY }}/${{ matrix.image }}:${{ env.GITHUB_SHA }} sbom_name: ${{ matrix.image }} diff --git a/.github/workflows/docker-vulnerability-scan.yml b/.github/workflows/docker-vulnerability-scan.yml index 7dea2647..791f9422 100644 --- a/.github/workflows/docker-vulnerability-scan.yml +++ b/.github/workflows/docker-vulnerability-scan.yml @@ -38,7 +38,7 @@ jobs: uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 # v2.0.1 - name: Docker vulnerability scan - uses: cds-snc/security-tools/.github/actions/docker-scan@eecd7a02a0294b379411c126b61e5c29e253676a # v2.1.4 + uses: cds-snc/security-tools/.github/actions/docker-scan@d6bb182e15f0cad80e7625887ae88e5830728aab # v3.0.0 with: docker_image: "${{ env.REGISTRY }}/${{ matrix.image }}:latest" dockerfile_path: "images/${{ matrix.image }}/Dockerfile"