From c23925bf12e313641d64a6acd500fba7f42f102e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Nov 2024 09:07:04 +0000
Subject: [PATCH] [v8](gha): Bump anchore/scan-action in the dependencies group
Bumps the dependencies group with 1 update: [anchore/scan-action](https://github.com/anchore/scan-action).
Updates `anchore/scan-action` from 4 to 5
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/anchore/scan-action/compare/v4...v5)
---
updated-dependencies:
- dependency-name: anchore/scan-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: dependencies
...
Signed-off-by: dependabot[bot] <support@github.com>
---
.github/workflows/check-cves.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/check-cves.yml b/.github/workflows/check-cves.yml
index 657ca5d3ac3..947b9d56a5b 100644
--- a/.github/workflows/check-cves.yml
+++ b/.github/workflows/check-cves.yml
@@ -13,7 +13,7 @@ jobs:
uses: actions/checkout@v4
- name: Scan current project
- uses: anchore/scan-action@v4
+ uses: anchore/scan-action@v5
with:
path: "."
add-cpes-if-none: true