diff --git a/.github/workflows/serverless-init-vulnerability-scan.yml b/.github/workflows/serverless-init-vulnerability-scan.yml index c9aace78a..7ec3ff446 100644 --- a/.github/workflows/serverless-init-vulnerability-scan.yml +++ b/.github/workflows/serverless-init-vulnerability-scan.yml @@ -35,7 +35,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Scan latest serverless-init image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "datadog/serverless-init:latest" only-fixed: true @@ -44,7 +44,7 @@ jobs: output-format: table - name: Scan latest-alpine serverless-init image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "datadog/serverless-init:latest-alpine" only-fixed: true diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml index 90f6cffa5..cdde87383 100644 --- a/.github/workflows/vulnerability-scan.yml +++ b/.github/workflows/vulnerability-scan.yml @@ -36,7 +36,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Scan latest release image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "public.ecr.aws/datadog/lambda-extension:latest" only-fixed: true @@ -45,7 +45,7 @@ jobs: output-format: table - name: Scan latest-alpine release image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "public.ecr.aws/datadog/lambda-extension:latest-alpine" only-fixed: true @@ -100,7 +100,7 @@ jobs: format: table - name: Scan amd64 image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "datadog/build-lambda-extension-amd64:${{ env.VERSION }}" only-fixed: true @@ -109,7 +109,7 @@ jobs: output-format: table - name: Scan arm64 image with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: image: "datadog/build-lambda-extension-arm64:${{ env.VERSION }}" only-fixed: true @@ -118,7 +118,7 @@ jobs: output-format: table - name: Scan binary files with grype - uses: anchore/scan-action@9e8428812aebf5a6a5fc3fdd55de39d1c79b8b12 # v7.0.1 + uses: anchore/scan-action@a5605eb0943e46279cb4fbd9d44297355d3520ab # v7.0.2 with: path: go/src/github.com/DataDog/datadog-lambda-extension/.layers only-fixed: true