diff --git a/.github/workflows/sbom-vulnerability-scan.yml b/.github/workflows/sbom-vulnerability-scan.yml index 6026d83..f72cc4a 100644 --- a/.github/workflows/sbom-vulnerability-scan.yml +++ b/.github/workflows/sbom-vulnerability-scan.yml @@ -149,7 +149,7 @@ jobs: - name: Generate SBOM from Docker image if: inputs.dockerfile != '' - uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 + uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3 with: image: localbuild/testimage:latest artifact-name: docker.cyclonedx.json @@ -220,7 +220,7 @@ jobs: - name: Generate SBOM from Python environment if: inputs.requirements != '' || inputs.pyproject != '' - uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 + uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3 with: path: .sbom_venv artifact-name: python.cyclonedx.json diff --git a/.github/workflows/third-party-licenses.yml b/.github/workflows/third-party-licenses.yml index ed210f8..e2b55b8 100644 --- a/.github/workflows/third-party-licenses.yml +++ b/.github/workflows/third-party-licenses.yml @@ -124,7 +124,7 @@ jobs: " - name: Generate SBOM from Docker image if: inputs.dockerfile != '' - uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 + uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3 with: image: license-scan-image format: syft-json