We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent c9b11b6 commit a50dc12Copy full SHA for a50dc12
.github/workflows/release.yaml
@@ -49,7 +49,7 @@ jobs:
49
with:
50
go-version: '1.22'
51
- name: Download Syft
52
- uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+ uses: anchore/sbom-action/download-syft@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.17.4
53
- name: Run GoReleaser
54
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6
55
@@ -106,7 +106,7 @@ jobs:
106
cache-to: type=gha,scope=${{ github.ref_name }}-${{ env.IMAGE_TAG }}
107
108
- name: Generate SBOM
109
- uses: anchore/sbom-action@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
+ uses: anchore/sbom-action@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.17.4
110
111
image: ${{ env.IMAGE_TAG }}
112
artifact-name: sbom-${{ env.IMAGE_NAME }}
0 commit comments