comparison .github/workflows/anchore.yml @ 8425:3db40a355a6c

chore: bump actions/checkout as reported by dependabot.
author John Rouillard <rouilj@ieee.org>
date Wed, 20 Aug 2025 11:23:39 -0400
parents fd72487d0054
children e5bd50120b5a
comparison
equal deleted inserted replaced
8424:4a948ad46579 8425:3db40a355a6c
35 security-events: write # for github/codeql-action/upload-sarif to upload SARIF results 35 security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
36 actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status 36 actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
37 runs-on: ubuntu-latest 37 runs-on: ubuntu-latest
38 steps: 38 steps:
39 - name: Checkout the code 39 - name: Checkout the code
40 uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 40 uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
41 - name: Build the Docker image 41 - name: Build the Docker image
42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest 42 run: docker pull python:3-alpine; docker build . --file scripts/Docker/Dockerfile --tag localbuild/testimage:latest
43 - name: List the Docker image 43 - name: List the Docker image
44 run: docker image ls 44 run: docker image ls
45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled 45 - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled

Roundup Issue Tracker: http://roundup-tracker.org/