From 162f2ece2490fba25278eeed2fc0846c5a1b24e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2026 10:58:16 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [securego/gosec](https://github.com/securego/gosec), [reviewdog/action-hadolint](https://github.com/reviewdog/action-hadolint), [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `securego/gosec` from 2.22.8 to 2.27.1 - [Release notes](https://github.com/securego/gosec/releases) - [Commits](https://github.com/securego/gosec/compare/c9453023c4e81ebdb6dde29e22d9cd5e2285fb16...9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889) Updates `reviewdog/action-hadolint` from 1.44.0 to 1.50.5 - [Release notes](https://github.com/reviewdog/action-hadolint/releases) - [Commits](https://github.com/reviewdog/action-hadolint/compare/15df5a025251f3b06814d53ba1e782f5a42b2874...921946a7ebaaf08ac72607bad67209f4e52b5407) Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25) Updates `github/codeql-action/upload-sarif` from 4.35.2 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/95e58e9a2cdfd71adc6e0353d5c52f41a045d225...8aad20d150bbac5944a9f9d289da16a4b0d87c1e) --- updated-dependencies: - dependency-name: securego/gosec dependency-version: 2.27.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-hadolint dependency-version: 1.50.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/gosec.yaml | 2 +- .github/workflows/hadolint.yml | 2 +- .github/workflows/trivy.yml | 12 ++++++------ 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/gosec.yaml b/.github/workflows/gosec.yaml index 5fc7708..99a576e 100644 --- a/.github/workflows/gosec.yaml +++ b/.github/workflows/gosec.yaml @@ -11,6 +11,6 @@ jobs: - name: Checkout Source uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 - name: Run Gosec Security Scanner - uses: securego/gosec@c9453023c4e81ebdb6dde29e22d9cd5e2285fb16 #v2.22.8 + uses: securego/gosec@9e6a9843d7a4a6e3e9a8539b02612c8a4aa3f889 #v2.27.1 with: args: ./... diff --git a/.github/workflows/hadolint.yml b/.github/workflows/hadolint.yml index 564a9d0..ec5a01c 100644 --- a/.github/workflows/hadolint.yml +++ b/.github/workflows/hadolint.yml @@ -12,7 +12,7 @@ jobs: - name: Check out code uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Scanning the dockerfile - uses: reviewdog/action-hadolint@15df5a025251f3b06814d53ba1e782f5a42b2874 # v1.44.0 + uses: reviewdog/action-hadolint@921946a7ebaaf08ac72607bad67209f4e52b5407 # v1.50.5 with: reporter: github-pr-review filter_mode: file diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index 4e6706b..2e051e6 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -35,14 +35,14 @@ jobs: run: git lfs checkout - name: Run Trivy vulnerability scanner in repo mode (table) - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: scan-type: 'fs' ignore-unfixed: true format: 'table' - name: Run Trivy vulnerability scanner in repo mode (sarif) - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: scan-type: 'fs' ignore-unfixed: true @@ -50,7 +50,7 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 + uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 with: sarif_file: 'trivy-results.sarif' @@ -76,14 +76,14 @@ jobs: docker build -t ${{ github.sha }} . - name: Run Trivy vulnerability scanner in image mode (table output) - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: image-ref: '${{ github.sha }}' ignore-unfixed: true format: 'table' - name: Run Trivy vulnerability scanner in image mode (sarif output) - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0 + uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0 with: image-ref: '${{ github.sha }}' ignore-unfixed: true @@ -91,6 +91,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 + uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 with: sarif_file: 'trivy-results.sarif'