diff --git a/.github/workflows/build-containers.yml b/.github/workflows/build-containers.yml index 2e5830a..b7f9166 100644 --- a/.github/workflows/build-containers.yml +++ b/.github/workflows/build-containers.yml @@ -536,7 +536,7 @@ jobs: - name: Run Grype vulnerability scanner id: grype-scan - uses: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c # v7.3.2 + uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0 with: image: "local-scan:${{ steps.meta.outputs.server_name }}-${{ steps.meta.outputs.version }}" severity-cutoff: "high" diff --git a/.github/workflows/periodic-security-scan.yml b/.github/workflows/periodic-security-scan.yml index d3fd1eb..98423fe 100644 --- a/.github/workflows/periodic-security-scan.yml +++ b/.github/workflows/periodic-security-scan.yml @@ -89,7 +89,7 @@ jobs: - name: Run Grype vulnerability scan (SARIF) id: grype-scan - uses: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c # v7.3.2 + uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0 with: image: "${{ steps.meta.outputs.image_ref }}" severity-cutoff: "low" @@ -104,7 +104,7 @@ jobs: - name: Run Grype vulnerability scan (JSON) id: grype-scan-json - uses: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c # v7.3.2 + uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0 with: image: "${{ steps.meta.outputs.image_ref }}" severity-cutoff: "low"