comparison .github/workflows/anchore.yml @ 8466:2f909acd5ba9

chore: dependabot update anchore 7.0.0 -> 7.0.2
author John Rouillard <rouilj@ieee.org>
date Mon, 20 Oct 2025 09:56:47 -0400
parents e5bd50120b5a
children 782ad9c0a15c
comparison
equal deleted inserted replaced
8465:617d55f1d518 8466:2f909acd5ba9
41 - name: Build the Docker image 41 - name: Build the Docker image
42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest 42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest
43 - name: List the Docker image 43 - name: List the Docker image
44 run: docker image ls 44 run: docker image ls
45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled 45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled
46 uses: anchore/scan-action@f6601287cdb1efc985d6b765bbf99cb4c0ac29d8 # 7.0.0 46 uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # 7.0.2
47 id: scan 47 id: scan
48 with: 48 with:
49 image: "localbuild/testimage:latest" 49 image: "localbuild/testimage:latest"
50 fail-build: true 50 fail-build: true
51 - name: Upload Anchore Scan Report 51 - name: Upload Anchore Scan Report

Roundup Issue Tracker: http://roundup-tracker.org/