1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-02-01 13:07:49 +02:00

chore(deps): bump anchore/sbom-action from 0.9.0 to 0.10.0 (#3026)

* chore(deps): bump anchore/sbom-action from 0.9.0 to 0.10.0

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.9.0 to 0.10.0.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](f6c3d0fe42...407a3ec314)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update .github/workflows/build.yml

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
This commit is contained in:
dependabot[bot] 2022-04-08 12:18:20 -03:00 committed by GitHub
parent 07ebdfd05e
commit dd0de9db07
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -81,7 +81,7 @@ jobs:
./dist/*.apk
key: ${{ runner.os }}-go-${{ hashFiles('**/*.go') }}-${{ hashFiles('**/go.sum') }}
- uses: sigstore/cosign-installer@ab3bb6a537fb08a1b78f7d1175fff799ca6850a3 # v2.1.0
- uses: anchore/sbom-action/download-syft@f6c3d0fe42c3cf876e3462574e4c9416b5e0f07a # v0.7.0
- uses: anchore/sbom-action/download-syft@407a3ec314b07e326eff3ba171091cbc150460a8 # v0.10.0
- name: setup-validate-krew-manifest
# TODO: replace this once https://github.com/kubernetes-sigs/krew/pull/736 is merged
run: go install github.com/caarlos0/krew/cmd/validate-krew-manifest@fork