chore(github-action): update anchore/sbom-action action v0.20.2 → v0.20.4 (#37756)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action) | action | patch | `cee1b8e` -> `7b36ad6` | Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Release Notes <details> <summary>anchore/sbom-action (anchore/sbom-action)</summary> ### [`v0.20.4`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.20.4) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.20.3...v0.20.4) #### Changes in v0.20.4 - chore: update Syft to v1.29.0 ([#​529](https://redirect.github.com/anchore/sbom-action/issues/529)) ### [`v0.20.3`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.20.3) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.20.2...v0.20.3) #### Changes in v0.20.3 - Fix: Strip emojis from correlator before using github APIs ([#​527](https://redirect.github.com/anchore/sbom-action/issues/527)) \[[AndrewHendry](https://redirect.github.com/AndrewHendry)] </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4yMC4wIiwidXBkYXRlZEluVmVyIjoiNDEuMjAuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJhdXRvbWVyZ2UiLCJyZW5vdmF0ZS9jb250YWluZXIiLCJyZW5vdmF0ZS9naXRodWItYWN0aW9uIiwicmVub3ZhdGUvZ2l0aHViLXJlbGVhc2UiLCJ0eXBlL3BhdGNoIl19-->
This commit is contained in:
@@ -195,7 +195,7 @@ jobs:
|
||||
- uses: sigstore/cosign-installer@main
|
||||
|
||||
- name: Install Syft
|
||||
uses: anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # v0.20.2
|
||||
uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # v0.20.4
|
||||
|
||||
- name: Login to Quay
|
||||
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
|
||||
|
||||
Reference in New Issue
Block a user