From 5099aef86529854c37a9fd3fdfe9ad56f91f8246 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Feb 2024 14:48:31 +0000 Subject: [PATCH] chore(deps): bump anchore/sbom-action from 0.15.7 to 0.15.8 (#4598) --- .github/workflows/build.yml | 2 +- .github/workflows/nightly-oss.yml | 2 +- .github/workflows/release.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 2d9b0fed0..3ea171f95 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -55,7 +55,7 @@ jobs: with: go-version: stable - uses: sigstore/cosign-installer@v3.4.0 - - uses: anchore/sbom-action/download-syft@v0.15.7 + - uses: anchore/sbom-action/download-syft@v0.15.8 - name: setup-validate-krew-manifest run: go install sigs.k8s.io/krew/cmd/validate-krew-manifest@latest - name: setup-tparse diff --git a/.github/workflows/nightly-oss.yml b/.github/workflows/nightly-oss.yml index 54a4e5c1e..c7b245acd 100644 --- a/.github/workflows/nightly-oss.yml +++ b/.github/workflows/nightly-oss.yml @@ -29,7 +29,7 @@ jobs: with: go-version: stable - uses: sigstore/cosign-installer@v3.4.0 - - uses: anchore/sbom-action/download-syft@v0.15.7 + - uses: anchore/sbom-action/download-syft@v0.15.8 - uses: crazy-max/ghaction-upx@v3 with: install-only: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7b59c28cd..68bc07afa 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -97,7 +97,7 @@ jobs: ./dist/*.apk key: ${{ github.ref }} - uses: sigstore/cosign-installer@v3.4.0 - - uses: anchore/sbom-action/download-syft@v0.15.7 + - uses: anchore/sbom-action/download-syft@v0.15.8 - uses: crazy-max/ghaction-upx@v3 with: install-only: true