From f0dafeffd3adbef62a40375bc6dfeb2131493b6f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 Mar 2024 19:28:44 +0000 Subject: [PATCH] chore(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#451) --- .github/workflows/test.yml | 8 ++++---- .github/workflows/update-snapshots.yml | 2 +- .github/workflows/update-syft-release.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b12229c1..97d5e3b7 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -17,7 +17,7 @@ jobs: build: # make sure build/ci work properly and there is no faked build ncc built scripts runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - run: npm ci - run: npm run package - run: git status --porcelain @@ -30,7 +30,7 @@ jobs: os: [ubuntu-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 with: path: ./ @@ -60,7 +60,7 @@ jobs: ports: - 5000:5000 steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: Build images run: | for distro in alpine centos debian; do @@ -73,7 +73,7 @@ jobs: test-as-action: # make sure the action works on a clean machine without building runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 with: path: ./ diff --git a/.github/workflows/update-snapshots.yml b/.github/workflows/update-snapshots.yml index 72076c35..4a9b1f06 100644 --- a/.github/workflows/update-snapshots.yml +++ b/.github/workflows/update-snapshots.yml @@ -40,7 +40,7 @@ jobs: comment-id: ${{ github.event.comment.id }} reactions: eyes - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 with: token: ${{ steps.generate-token.outputs.token }} repository: ${{ fromJSON(steps.get-pr.outputs.result).head.repo.full_name }} diff --git a/.github/workflows/update-syft-release.yml b/.github/workflows/update-syft-release.yml index d3c62e20..2534a91c 100644 --- a/.github/workflows/update-syft-release.yml +++ b/.github/workflows/update-syft-release.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'anchore/sbom-action' steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2 - name: Get latest Syft version id: latest-version env: