scorecard/5.0.0-r1: cve remediation (#33334)

scorecard/5.0.0-r1: fix GHSA-29wx-vh33-7x7r Advisory data: https://github.com/wolfi-dev/advisories/blob/main/scorecard.advisories.yaml Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Nov 5, 2024 · db62f0e · db62f0e
1 parent 886f721
commit db62f0e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/scorecard.yaml b/scorecard.yaml
@@ -1,7 +1,7 @@
 package:
   name: scorecard
   version: 5.0.0
-  epoch: 1
+  epoch: 2
   description: OpenSSF Scorecard - Security health metrics for Open Source
   copyright:
     - license: Apache-2.0
@@ -25,6 +25,10 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4
 
+  - uses: go/bump
+    with:
+      deps: github.com/golang-jwt/jwt/[email protected]
+
   - runs: |
       make build-scorecard
       install -Dm755 ./scorecard "${{targets.destdir}}/usr/bin/scorecard"