diff --git a/.github/workflows/anchore-analysis.yml b/.github/workflows/anchore-analysis.yml index c1b2f3d..77b98e0 100644 --- a/.github/workflows/anchore-analysis.yml +++ b/.github/workflows/anchore-analysis.yml @@ -24,7 +24,7 @@ jobs: - name: Build the Docker image run: docker build . --file Dockerfile --tag localbuild/testimage:latest - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled - uses: anchore/scan-action@v3 + uses: anchore/scan-action@v4 id: scan with: image: "localbuild/testimage:latest" @@ -34,7 +34,7 @@ jobs: with: sarif_file: ${{ steps.scan.outputs.sarif }} - name: Fail build if scan has vulns - uses: anchore/scan-action@v3 + uses: anchore/scan-action@v4 with: image: "localbuild/testimage:latest" severity-cutoff: critical