@@ -29,11 +29,11 @@ jobs:
2929 steps :
3030 # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
3131 - name : Git Checkout
32- uses : actions/checkout@v4.1.7
32+ uses : actions/checkout@v4.2.2
3333
3434 - name : Get changed files
3535 id : changed-files
36- uses : tj-actions/changed-files@v44.5.7
36+ uses : tj-actions/changed-files@v46.0.5
3737 with :
3838 files_ignore : |
3939 .github/**
@@ -56,25 +56,25 @@ jobs:
5656
5757 - name : Set up Docker Buildx
5858 if : steps.changed-files.outputs.any_changed == 'true'
59- uses : docker/setup-buildx-action@v3
59+ uses : docker/setup-buildx-action@v3.11.1
6060
6161 - name : Log in to Docker Hub
6262 if : steps.changed-files.outputs.any_changed == 'true'
63- uses : docker/login-action@v3.3 .0
63+ uses : docker/login-action@v3.4 .0
6464 with :
6565 username : ${{ secrets.DOCKERHUB_USERNAME }}
6666 password : ${{ secrets.DOCKERHUB_TOKEN }}
6767
6868 - name : Extract metadata (tags, labels) for Docker
6969 if : steps.changed-files.outputs.any_changed == 'true'
7070 id : meta
71- uses : docker/metadata-action@v5.5.1
71+ uses : docker/metadata-action@v5.7.0
7272 with :
7373 images : georgedavisibexlabs/publish-sarif-to-jira
7474
7575 - name : Build Docker image
7676 if : steps.changed-files.outputs.any_changed == 'true'
77- uses : docker/build-push-action@v6.6.1
77+ uses : docker/build-push-action@v6.18.0
7878 with :
7979 context : .
8080 file : Dockerfile
8585
8686 - name : Run Trivy in GitHub SBOM mode and submit results to Dependency Graph
8787 if : steps.changed-files.outputs.any_changed == 'true'
88- uses : aquasecurity/trivy-action@0.24 .0
88+ uses : aquasecurity/trivy-action@0.32 .0
8989 with :
9090 scan-type : " fs"
9191 format : " github"
@@ -95,22 +95,22 @@ jobs:
9595
9696 - name : Upload trivy SBOM as a Github artifact
9797 if : steps.changed-files.outputs.any_changed == 'true'
98- uses : actions/upload-artifact@v4.3.6
98+ uses : actions/upload-artifact@v4.6.2
9999 with :
100100 name : trivy-sbom-report
101101 path : trivy-dependency-results.sbom.json
102102 retention-days : 30
103103
104104 - name : Run Trivy Image scanner
105- uses : aquasecurity/trivy-action@0.24 .0
105+ uses : aquasecurity/trivy-action@0.32 .0
106106 with :
107107 scan-type : " image"
108108 image-ref : " georgedavisibexlabs/publish-sarif-to-jira:main"
109109 limit-severities-for-sarif : true
110110 trivy-config : .github/config/trivy-sarif.yaml
111111
112112 - name : Upload Trivy Image scan results
113- uses : actions/upload-artifact@v4.3.6
113+ uses : actions/upload-artifact@v4.6.2
114114 with :
115115 name : trivy-image-scan-results
116116 path : trivy-image-scan-results.sarif
0 commit comments