Browse Source

Merge pull request #4272 from dexidp/dependabot/github_actions/anchore/sbom-action-0.20.5

build(deps): bump anchore/sbom-action from 0.20.4 to 0.20.5
pull/4251/head
Márk Sági-Kazár 7 months ago committed by GitHub
parent
commit
e79de0dd36
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 2
      .github/workflows/artifacts.yaml

2
.github/workflows/artifacts.yaml

@ -60,7 +60,7 @@ jobs:
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
- name: Set up Syft
uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # v0.20.4
uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
- name: Install cosign
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2

Loading…
Cancel
Save