diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fe9b49b..315a955 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -153,7 +153,7 @@ jobs: # Docker-Scout - Create SBOM - name: Create SBOM - uses: docker/scout-action@7c61653c2736d21969dd4593fde76c670d4a86cb + uses: docker/scout-action@b7413c99043c2a9131c0fa39cedaece80f285788 id: docker-scout-sbom continue-on-error: true if: env.CONTAINER_PUSH == 'true' && vars.DOCKERHUB_USERNAME != '' @@ -165,7 +165,7 @@ jobs: # vulnerability scan the image for main branch and upload the results as a SARIF file - name: Analyze for critical and high CVEs - uses: docker/scout-action@7c61653c2736d21969dd4593fde76c670d4a86cb + uses: docker/scout-action@b7413c99043c2a9131c0fa39cedaece80f285788 id: docker-scout-cves continue-on-error: true if: env.CONTAINER_PUSH == 'true' && github.ref_name == 'main' @@ -184,7 +184,7 @@ jobs: # vulnerability scanning to verify PRs - name: Docker Scout compare - uses: docker/scout-action@7c61653c2736d21969dd4593fde76c670d4a86cb + uses: docker/scout-action@b7413c99043c2a9131c0fa39cedaece80f285788 id: pr-compare if: github.event_name == 'pull_request' && vars.DOCKERHUB_USERNAME != '' with: