mirror of
https://github.com/project-zot/zot.git
synced 2026-06-18 05:28:07 +08:00
Fix dependabot alerts (#3188)
* chore: update github.com/redis/go-redis/v9 to v9.9.0 Signed-off-by: Andrei Aaron <aaaron@luxoft.com> * chore: update trivy to v0.63.0 Signed-off-by: Andrei Aaron <aaaron@luxoft.com> * chore: update github.com/spf13/cast to v1.9.2 Signed-off-by: Andrei Aaron <aaaron@luxoft.com> * chore: update ossf/scorecard-action from 2.4.1 to 2.4.2 Signed-off-by: Andrei Aaron <aaaron@luxoft.com> * chore: fix multiple dependabot alerts Signed-off-by: Andrei Aaron <aaaron@luxoft.com> --------- Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
This commit is contained in:
@@ -237,7 +237,7 @@ jobs:
|
||||
TRIVY_USERNAME: ${{ github.actor }}
|
||||
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v3.28.18
|
||||
uses: github/codeql-action/upload-sarif@v3.28.19
|
||||
with:
|
||||
sarif_file: 'trivy-results.sarif'
|
||||
|
||||
@@ -274,7 +274,7 @@ jobs:
|
||||
TRIVY_USERNAME: ${{ github.actor }}
|
||||
TRIVY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
|
||||
- name: Upload Trivy scan results to GitHub Security tab
|
||||
uses: github/codeql-action/upload-sarif@v3.28.18
|
||||
uses: github/codeql-action/upload-sarif@v3.28.19
|
||||
with:
|
||||
sarif_file: 'trivy-results.sarif'
|
||||
|
||||
|
||||
Reference in New Issue
Block a user