From 27efa581cdf2192acf08fdee1fc13325df66870c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 7 Feb 2023 23:10:56 +0000 Subject: [PATCH] Bump snyk/actions Bumps [snyk/actions](https://github.com/snyk/actions) from e25b2e6f5658d1bb7a6671b113260f13134cc3af to 9c6dde2db83c301ca0ad0910dead8f39c9f426a0. - [Release notes](https://github.com/snyk/actions/releases) - [Commits](https://github.com/snyk/actions/compare/e25b2e6f5658d1bb7a6671b113260f13134cc3af...9c6dde2db83c301ca0ad0910dead8f39c9f426a0) --- updated-dependencies: - dependency-name: snyk/actions dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/vulnerability.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/vulnerability.yml b/.github/workflows/vulnerability.yml index 41ce194..fb44f66 100644 --- a/.github/workflows/vulnerability.yml +++ b/.github/workflows/vulnerability.yml @@ -34,7 +34,7 @@ jobs: # Snyk can be used to break the build when it detects vulnerabilities. # In this case we want to upload the issues to GitHub Code Scanning continue-on-error: true - uses: snyk/actions/docker@e25b2e6f5658d1bb7a6671b113260f13134cc3af + uses: snyk/actions/docker@9c6dde2db83c301ca0ad0910dead8f39c9f426a0 env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: @@ -46,7 +46,7 @@ jobs: sarif_file: snyk.sarif - name: Accept only vulnerability levels below high (and critical) continue-on-error: false - uses: snyk/actions/docker@e25b2e6f5658d1bb7a6671b113260f13134cc3af + uses: snyk/actions/docker@9c6dde2db83c301ca0ad0910dead8f39c9f426a0 env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} with: