From b4a68ed2aca42f7b1ff926bd32547179931ae24a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 6 Sep 2024 05:36:16 +0000 Subject: [PATCH] build(dependencies): bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action). Updates `actions/upload-artifact` from 4.3.6 to 4.4.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/834a144ee995460fba8ed112a2fc961b36a5ec5a...50769540e7f4bd5e21e526ee35c689e35e0d6874) Updates `bridgecrewio/checkov-action` from 12.2860.0 to 12.2864.0 - [Release notes](https://github.com/bridgecrewio/checkov-action/releases) - [Commits](https://github.com/bridgecrewio/checkov-action/compare/1b813e8f72afe2b6263a6ea10c873707e21ebe44...c9421864e014ef6b8acfa35d0bf3c7e52c13ab10) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: bridgecrewio/checkov-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-generic.yml | 2 +- .github/workflows/docker-ci-generic.yml | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci-generic.yml b/.github/workflows/ci-generic.yml index 0da54d9..d26b6b5 100644 --- a/.github/workflows/ci-generic.yml +++ b/.github/workflows/ci-generic.yml @@ -68,7 +68,7 @@ jobs: version: ${{ inputs.version }} - name: Upload Instance BuildInfo.properties - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a #4.3.6 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 #4.4.0 with: name: pre-build-instance-buildinfo path: ./*/main/resources/BuildInfo.properties diff --git a/.github/workflows/docker-ci-generic.yml b/.github/workflows/docker-ci-generic.yml index 2f6cf0c..4aaa119 100644 --- a/.github/workflows/docker-ci-generic.yml +++ b/.github/workflows/docker-ci-generic.yml @@ -121,7 +121,7 @@ jobs: cache-to: type=gha,mode=max - name: "Upload Docker tar" - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a #4.3.6 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 #4.4.0 with: name: build-docker-image path: ./image.tar @@ -146,7 +146,7 @@ jobs: - name: Lint Dockerfile with Checkov id: checkov - uses: bridgecrewio/checkov-action@1b813e8f72afe2b6263a6ea10c873707e21ebe44 #12.2860.0 + uses: bridgecrewio/checkov-action@c9421864e014ef6b8acfa35d0bf3c7e52c13ab10 #12.2864.0 with: directory: . framework: dockerfile @@ -158,7 +158,7 @@ jobs: output_file_path: reports/checkov-results.sarif - name: Upload Sarif report as artifact - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a #4.3.6 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 #4.4.0 with: name: checkov-results path: reports/checkov-results.sarif @@ -201,7 +201,7 @@ jobs: # hide-progress: false # - # name: "Upload Sarif report as artifact" - # uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a #4.3.6 + # uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 #4.4.0 # with: # name: trivy-results # path: trivy-results.sarif