From 4cd4d57d7053fd4541cd7e15c629e7895c900cd2 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 14:04:15 -0700 Subject: [PATCH 1/4] Update docker/dockerfile Docker tag to v1.9 (#106) * Update docker/dockerfile Docker tag to v1.9 | datasource | package | from | to | | ---------- | ----------------- | ---- | --- | | docker | docker/dockerfile | 1.6 | 1.9 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * Update Dockerfile --------- Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Luca Comellini --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index ed7e063..d7f7d64 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,8 +1,8 @@ -# syntax=docker/dockerfile:1.6 +# syntax=docker/dockerfile:1.9 ARG BUILD_OS=alpine:3.19 ARG OPENSSL_VERSION=3.0.9 -FROM ${BUILD_OS} as alpine +FROM ${BUILD_OS} AS alpine ARG OPENSSL_VERSION RUN apk add --no-cache --virtual .build-deps \ From 867ad6066723f59ebe2c892dc61fbf47ecc114e2 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 14:06:05 -0700 Subject: [PATCH 2/4] Update anchore/scan-action action to v4.1.2 (#103) | datasource | package | from | to | | ----------- | ------------------- | ------ | ------ | | github-tags | anchore/scan-action | v4.1.1 | v4.1.2 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0c6029d..f064953 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -79,7 +79,7 @@ jobs: OPENSSL_VERSION=${{ matrix.openssl_version }} - name: Run Grype vulnerability scanner - uses: anchore/scan-action@bc9adf64917dd9444d6cf4dd68620c34ca3a5f69 # v4.1.1 + uses: anchore/scan-action@64a33b277ea7a1215a3c142735a1091341939ff5 # v4.1.2 continue-on-error: true id: scan with: From dcaac5e8194306a91fe9a6cb68a47bf8f938e567 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 21:07:23 +0000 Subject: [PATCH 3/4] Update github/codeql-action action to v3.26.4 (#104) | datasource | package | from | to | | ----------- | -------------------- | ------- | ------- | | github-tags | github/codeql-action | v3.26.3 | v3.26.4 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 2 +- .github/workflows/scorecards.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f064953..02f2d3d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -88,7 +88,7 @@ jobs: add-cpes-if-none: true - name: Upload Anchore scan SARIF report - uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449 # v3.26.3 + uses: github/codeql-action/upload-sarif@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4 with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 17b877e..3f087fb 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -56,6 +56,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@883d8588e56d1753a8a58c1c86e88976f0c23449 # v3.26.3 + uses: github/codeql-action/upload-sarif@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4 with: sarif_file: results.sarif From 9bc583e9cb08f1a82444fcec30f9a2f86c5c8d52 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 23 Aug 2024 21:14:40 +0000 Subject: [PATCH 4/4] Update alpine Docker tag to v3.20 (#105) | datasource | package | from | to | | ---------- | ------- | ---- | ---- | | docker | alpine | 3.19 | 3.20 | Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index d7f7d64..dab22db 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1.9 -ARG BUILD_OS=alpine:3.19 +ARG BUILD_OS=alpine:3.20 ARG OPENSSL_VERSION=3.0.9 FROM ${BUILD_OS} AS alpine