summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorLinus Färnstrand <linus@mullvad.net>2024-06-05 09:16:30 +0200
committerLinus Färnstrand <linus@mullvad.net>2024-07-02 13:16:58 +0200
commitb53523d87e531232e7df1d48fd36a56433966a87 (patch)
tree14747b9e3c07b17eeb7087e53e891ee89153984c
parent5dcc3a3349600f583815d668b4405de735d1b0ec (diff)
downloadmullvadvpn-b53523d87e531232e7df1d48fd36a56433966a87.tar.xz
mullvadvpn-b53523d87e531232e7df1d48fd36a56433966a87.zip
Upgrade osv-scanner to 1.7.4 workflow
-rw-r--r--.github/workflows/osv-scanner.yml9
1 files changed, 7 insertions, 2 deletions
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 570d775b23..31a5d7db51 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -30,15 +30,20 @@ permissions:
security-events: write
# Only need to read contents
contents: read
+ # Needed to read the workflow from another repository(???)
+ actions: read
jobs:
scan-scheduled:
+ # yamllint disable rule:line-length
if: ${{ github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' || github.event_name == 'pull_request' }}
- uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.7.1"
+ # yamllint disable rule:line-length
+ uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@f0e45d2960258cf40285d596a10f817af70af1f7" # v1.7.4
with:
scan-args: -r --skip-git ./
scan-pr:
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
- uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v1.7.1"
+ # yamllint disable rule:line-length
+ uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@f0e45d2960258cf40285d596a10f817af70af1f7" # v1.7.4
with:
scan-args: -r --skip-git ./