Browse Source

build(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 (#4629)

pull/4631/head
dependabot[bot] 7 days ago committed by GitHub
parent
commit
ae8c5af72e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 2
      .github/workflows/artifacts.yaml

2
.github/workflows/artifacts.yaml

@ -62,7 +62,7 @@ jobs:
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
- name: Set up Syft
uses: anchore/sbom-action/download-syft@17ae1740179002c89186b61233e0f892c3118b11 # v0.23.0
uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
- name: Install cosign
uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0

Loading…
Cancel
Save