diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index dce8cd7..099720e 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -23,6 +23,6 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Dependency Review - uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0 + uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0 with: fail-on-severity: critical diff --git a/.github/workflows/scan-image.yml b/.github/workflows/scan-image.yml index ca0a89e..4fbf792 100644 --- a/.github/workflows/scan-image.yml +++ b/.github/workflows/scan-image.yml @@ -45,7 +45,7 @@ jobs: - name: Upload SARIF if: always() id: upload_sarif - uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3 + uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml index d17b7d3..c09121b 100644 --- a/.github/workflows/super-linter.yml +++ b/.github/workflows/super-linter.yml @@ -29,6 +29,6 @@ jobs: - name: Run Super-Linter id: super_linter - uses: super-linter/super-linter/slim@b92721f792f381cedc002ecdbb9847a15ece5bb8 # v7.1.0 + uses: super-linter/super-linter/slim@e1cb86b6e8d119f789513668b4b30bf17fe1efe4 # v7.2.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/Dockerfile b/Dockerfile index 64648c8..4a3cb2e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -36,7 +36,7 @@ apt-get update --yes apt-get install --yes \ "apt-transport-https=2.7.14build2" \ - "curl=8.5.0-2ubuntu10.4" + "curl=8.5.0-2ubuntu10.5" apt-get clean --yes