From c176a4e70d9261e67ce81a3611d18bfbc0685faf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Jun 2025 02:59:46 +0000 Subject: [PATCH] build(deps): Bump the actions-minor group across 1 directory with 2 updates Bumps the actions-minor group with 2 updates in the / directory: [anchore/sbom-action](https://github.com/anchore/sbom-action) and [actions/attest-sbom](https://github.com/actions/attest-sbom). Updates `anchore/sbom-action` from 0.19.0 to 0.20.1 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/9f7302141466aa6482940f15371237e9d9f4c34a...9246b90769f852b3a8921f330c59e0b3f439d6e9) Updates `actions/attest-sbom` from 2.2.0 to 2.4.0 - [Release notes](https://github.com/actions/attest-sbom/releases) - [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-sbom/compare/115c3be05ff3974bcbd596578934b3f9ce39bf68...bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor - dependency-name: actions/attest-sbom dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/attest-and-deploy.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/attest-and-deploy.yml b/.github/workflows/attest-and-deploy.yml index 85774e6..fd3d74a 100644 --- a/.github/workflows/attest-and-deploy.yml +++ b/.github/workflows/attest-and-deploy.yml @@ -30,7 +30,7 @@ jobs: # Generate SBOM from the dependencies (scanning the workspace directory) - name: Generate SBOM - uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a + uses: anchore/sbom-action@9246b90769f852b3a8921f330c59e0b3f439d6e9 with: upload-artifact: false upload-release-assets: false @@ -54,7 +54,7 @@ jobs: # subject-path: "dist.tar.gz" # Complete an attestation of the SBOM and the build - - uses: actions/attest-sbom@115c3be05ff3974bcbd596578934b3f9ce39bf68 + - uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b with: subject-path: 'dist.tar.gz' sbom-path: 'sbom.spdx.json' pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy