diff --git a/.github/workflows/ci-maven-build-lib.yml b/.github/workflows/ci-maven-build-lib.yml index 00a990ad..f4ae582d 100644 --- a/.github/workflows/ci-maven-build-lib.yml +++ b/.github/workflows/ci-maven-build-lib.yml @@ -152,6 +152,6 @@ jobs: library-hide-progress: ${{ inputs.trivy-library-hide-progress }} trivy-version: ${{ inputs.trivy-version }} - - uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # pin@v0.20.6 + - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # pin@v0.24.0 with: path: ${{ inputs.sbom-path }} diff --git a/.github/workflows/ci-maven-deploy.yml b/.github/workflows/ci-maven-deploy.yml index ce6aaafa..2a15c34f 100644 --- a/.github/workflows/ci-maven-deploy.yml +++ b/.github/workflows/ci-maven-deploy.yml @@ -113,6 +113,6 @@ jobs: mvn -B deploy fi - - uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # pin@v0.20.6 + - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # pin@v0.24.0 with: path: ${{ inputs.sbom-path }} diff --git a/.github/workflows/ci-maven-install-deploy-lib.yml b/.github/workflows/ci-maven-install-deploy-lib.yml index a209816d..3d82769a 100644 --- a/.github/workflows/ci-maven-install-deploy-lib.yml +++ b/.github/workflows/ci-maven-install-deploy-lib.yml @@ -162,7 +162,7 @@ jobs: run: | echo "artifact-id=${{ inputs.artifact-name }}-${{ github.run_number }}-${{ github.run_attempt }}.spdx" >> "$GITHUB_OUTPUT" - - uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # pin@v0.20.6 + - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # pin@v0.24.0 with: path: ${{ inputs.sbom-path }} artifact-name: ${{ steps.set-artifact-id.outputs.artifact-id }} diff --git a/.github/workflows/ci-quarkus-build-publish-image.yml b/.github/workflows/ci-quarkus-build-publish-image.yml index 1f7dea59..f07c39f3 100644 --- a/.github/workflows/ci-quarkus-build-publish-image.yml +++ b/.github/workflows/ci-quarkus-build-publish-image.yml @@ -219,7 +219,7 @@ jobs: SBOM_NAME=$(echo ${{env.IMAGE-NAME}} | tr '/' '-') echo "SBOM_ARTIFACT_ID=$SBOM_NAME" >> "$GITHUB_OUTPUT" - - uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # pin@v0.20.6 + - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # pin@v0.24.0 with: image: ${{env.IMAGE-NAME}}:${{env.IMAGETAG}} artifact-name: sbom-${{steps.sbom-name.outputs.SBOM_ARTIFACT_ID}}-${{env.IMAGETAG}}.spdx diff --git a/.github/workflows/ci-quarkus-container-scan.yml b/.github/workflows/ci-quarkus-container-scan.yml index 39016eed..8170b8a3 100644 --- a/.github/workflows/ci-quarkus-container-scan.yml +++ b/.github/workflows/ci-quarkus-container-scan.yml @@ -164,7 +164,7 @@ jobs: SBOM_NAME=$(echo ${{env.IMAGE-NAME}} | tr '/' '-') echo "SBOM_ARTIFACT_ID=$SBOM_NAME" >> "$GITHUB_OUTPUT" - - uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # pin@v0.20.6 + - uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # pin@v0.24.0 with: image: ${{env.IMAGE-NAME}}:${{env.IMAGETAG}} artifact-name: sbom-${{steps.sbom-name.outputs.SBOM_ARTIFACT_ID}}-${{env.IMAGETAG}}.spdx