chore(deps): update docker/scout-action action to v1.22.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
docker/scout-action	action	minor	v1.18.2 → v1.22.0

---

Release Notes

docker/scout-action (docker/scout-action)

v1.22.0

Compare Source

What's Changed

• Proxies Trivy's Java DB download through Docker Desktop's HTTP proxy transport @​AndreSilva1993

v1.21.0

Compare Source

What's Changed

• Fix local DHI-derived image handling, including inherited VEX and quickview base-image display
• Improve SBOM package qualifier handling, including DHI distro qualifiers
• Update dependencies and Go toolchain

v1.20.4

Compare Source

What's Changed

• Add JSON output format for docker scout compare @​benja-M-1
• Add image config field changes to docker scout compare output @​benja-M-1
• Fix Docker Desktop proxy detection in WSL2 environments @​benja-M-1
• Update dependencies @​benja-M-1

v1.20.3

Compare Source

What's Changed

• Improve retries of temporary and network errors @​chrispatrick
• Fix handling of dockerfiles included in provenance attestations @​chrispatrick
• Fix handling of cosign sig tags @​chrispatrick
• Use Docker Desktop HTTP proxy transport when available @​benja-M-1
• Escape mentions from CVE descriptions to prevent spam notifications @​benja-M-1

v1.20.2

Compare Source

What's Changed

• Fix binary download logic @​benja-M-1

v1.20.1

Compare Source

What's Changed

• Minor fixes for DHI @​cdupuis
• Add docker scout vex get command to get a merged VEX document from all VEX attestations @​cdupuis
• VEX and SPDX fixes @​cdupuis
• Documentation updates @​craig-osterhout @​dvdksn
• CVE fixes @​cdupuis
• Update dependencies @​cdupuis
• Handle attestation source failures more gracefully @​chrispatrick
• Bug fixes including around VEX, versioning and indexing @​cdupuis
• Fix vulnerabilities @​jpbriend
• Fix apk version handling @​cdupuis
• Support SLSA v1 Provenance @​chrispatrick
• Fix Go purl versioning @​cdupuis
• Fix VCS provenance parsing @​chrispatrick

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud