From: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Oct 2022 19:44:18 +0000 (+0000) Subject: github-actions: bump ossf/scorecard-action from 2.0.4 to 2.0.6 X-Git-Tag: suricata-7.0.0-beta1~53 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb8c9d9617c75f51f19301f59bc6e9c97bfd5f74;p=thirdparty%2Fsuricata.git github-actions: bump ossf/scorecard-action from 2.0.4 to 2.0.6 Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.4 to 2.0.6. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/e363bfca00e752f91de7b7d2a77340e2e523cb18...99c53751e09b9529366343771cc321ec74e9bd3d) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 0e3881505e..4fc02ad4c6 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -27,7 +27,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@e363bfca00e752f91de7b7d2a77340e2e523cb18 # v1.0.1 + uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v1.0.1 with: results_file: results.sarif results_format: sarif