Skip to content

Commit

Permalink
Bump docker/scout-action from 1.2.0 to 1.2.2 (#131)
Browse files Browse the repository at this point in the history
Bumps [docker/scout-action](https://github.com/docker/scout-action) from
1.2.0 to 1.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/scout-action/releases">docker/scout-action's
releases</a>.</em></p>
<blockquote>
<h2>v1.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix link rendering growing the column by <a
href="https://github.com/cdupuis"><code>@​cdupuis</code></a></li>
<li>No cache and docs by <a
href="https://github.com/cdupuis"><code>@​cdupuis</code></a></li>
<li>Add correlation headers by <a
href="https://github.com/cdupuis"><code>@​cdupuis</code></a></li>
<li>Allow to pass in additional SBOM catalogers by <a
href="https://github.com/cdupuis"><code>@​cdupuis</code></a></li>
<li>Add No Data link for SonarQube policy by <a
href="https://github.com/felipecruz91"><code>@​felipecruz91</code></a></li>
<li>Policy fixes by <a
href="https://github.com/cdupuis"><code>@​cdupuis</code></a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/scout-action/commit/b7413c99043c2a9131c0fa39cedaece80f285788"><code>b7413c9</code></a>
Update from 3ef46e8dc0d5415720e17439e39017074d670409</li>
<li><a
href="https://github.com/docker/scout-action/commit/3cbf4f3d9c20c89b347ce11385298dc0e54c7801"><code>3cbf4f3</code></a>
Update from 5a1d724582882e6e22e7eb42feac6e534597e536</li>
<li>See full diff in <a
href="https://github.com/docker/scout-action/compare/7c61653c2736d21969dd4593fde76c670d4a86cb...b7413c99043c2a9131c0fa39cedaece80f285788">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/scout-action&package-manager=github_actions&previous-version=1.2.0&new-version=1.2.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>
  • Loading branch information
nam20485 authored Dec 23, 2023
2 parents f0f79ab + b7775b5 commit 9857385
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/docker-scout-scan.yml
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,7 @@ jobs:
- name: Analyze for critical and high CVEs
id: docker-scout-cves
# if: ${{ github.event_name != 'pull_request_target' }}
uses: docker/scout-action@7c61653c2736d21969dd4593fde76c670d4a86cb # v1.2.0
uses: docker/scout-action@b7413c99043c2a9131c0fa39cedaece80f285788 # v1.2.2
with:
command: cves,recommendations
image: ${{ steps.meta.outputs.tags }}
Expand All @@ -145,7 +145,7 @@ jobs:
- name: Docker Scout Compare to Latest
id: docker-scout
if: ${{ github.event_name == 'pull_request' }}
uses: docker/scout-action@7c61653c2736d21969dd4593fde76c670d4a86cb # v1.2.0
uses: docker/scout-action@b7413c99043c2a9131c0fa39cedaece80f285788 # v1.2.2
with:
command: compare
image: ${{ steps.meta.outputs.tags }}
Expand Down

0 comments on commit 9857385

Please sign in to comment.