-
Notifications
You must be signed in to change notification settings - Fork 404
Commit cff68e6
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
Bump google/osv-scanner-action from 2.1.0 to 2.2.2 (#1123)
Bumps
[google/osv-scanner-action](https://github.com/google/osv-scanner-action)
from 2.1.0 to 2.2.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.2</h2>
<p>This updates OSV-Scanner to v2.2.2.</p>
<h2>What's Changed</h2>
<ul>
<li>docs: Update Automatic install instructions by <a
href="https://github.com/another-rex"><code>@another-rex</code></a> in
<a
href="https://redirect.github.com/google/osv-scanner-action/pull/94">google/osv-scanner-action#94</a></li>
<li>Update to v2.2.2 by <a
href="https://github.com/cuixq"><code>@cuixq</code></a> in <a
href="https://redirect.github.com/google/osv-scanner-action/pull/95">google/osv-scanner-action#95</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/osv-scanner-action/compare/v2.2.1...v2.2.2">https://github.com/google/osv-scanner-action/compare/v2.2.1...v2.2.2</a></p>
<h2>v2.2.1</h2>
<h2>What's Changed</h2>
<p>OSV-Scanner now supports all OSV-Scalibr features behind experimental
flags (<code>--experimental-plugins</code>, see details <a
href="https://google.github.io/osv-scanner/experimental/manual-plugin-selection/">here</a>)!</p>
<h3>Features:</h3>
<ul>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2146">#2146</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2146">google/osv-scanner#2146</a>)
Allow manual OSV-Scalibr plugin selection.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2144">#2144</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2144">google/osv-scanner#2144</a>)
Add OSV-Scalibr version to osv-scanner --version output.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2021">#2021</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2021">google/osv-scanner#2021</a>)
Add experimental support for running OSV-Scalibr detectors.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2079">#2079</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2079">google/osv-scanner#2079</a>)
Fall back to offline extractor if the transitive one fails, so at least
direct dependencies are returned.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2032">#2032</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2032">google/osv-scanner#2032</a>)
Add summary section at the top of outputs and a 'Fixed Version'
column.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2076">#2076</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2076">google/osv-scanner#2076</a>)
Support Ubuntu severity type.</li>
</ul>
<h3>Fixes:</h3>
<ul>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2141">#2141</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2141">google/osv-scanner#2141</a>)
Fix OSV-Scanner json scans not matching with correct ecosystem.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2084">#2084</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2084">google/osv-scanner#2084</a>)
Show absolute paths when scanning containers.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2126">#2126</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2126">google/osv-scanner#2126</a>)
Log and preserve package count before continuing on db error.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2095">#2095</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2095">google/osv-scanner#2095</a>)
Pass through plugin capabilities correctly.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2051">#2051</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2051">google/osv-scanner#2051</a>)
Properly flag if running on Linux or Mac OSs for plugin
compatibility.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2072">#2072</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2072">google/osv-scanner#2072</a>)
Add missing "text" property in description fields.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2068">#2068</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2068">google/osv-scanner#2068</a>)
Change links in output to go to the specific vulnerability page instead
of the list page.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2064">#2064</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2064">google/osv-scanner#2064</a>)
Fix SARIF v3 output to include results.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2151">#2151</a>](<a
href="https://redirect.github.com/google/osv-scanner/issues/2151">google/osv-scanner#2151</a>)
Filter by ecosystem before querying.</li>
</ul>
<h3>API Changes:</h3>
<ul>
<li>[API Change <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2096">#2096</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2096">google/osv-scanner#2096</a>)
Allow log handler to be overridden.</li>
</ul>
<hr />
<blockquote>
<p>[!WARNING]
This release was originally incorrectly pointing to the bugged v2.2.0
osv-scanner release, it has now been retagged to the correct v2.2.1
release.</p>
</blockquote>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/osv-scanner-action/commit/90b209d0ea55cea1da9fc0c4e65782cc6acb6e2e"><code>90b209d</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/95">#95</a>
from google/update-to-v2.2.2</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/4971fe857574947ed156aac249b0ef89a08473be"><code>4971fe8</code></a>
Update unified workflow example to point to v2.2.2 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/9d4732e8b9db0915df9608123133640b58bb6750"><code>9d4732e</code></a>
Update reusable workflows to point to v2.2.2 actions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/23f8850c0f6fc96b3324529b3f30665d63391634"><code>23f8850</code></a>
"Update actions to use v2.2.2 osv-scanner image"</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/958b538d18ba1682c5ce6e16a40ff2a84b246e48"><code>958b538</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/94">#94</a>
from google/another-rex-patch-1</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/11cd74e7e1e0f6fc17bb6e7a974d1837a4a5c233"><code>11cd74e</code></a>
Update Automatic install instructions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/456ceb78310755116e0a3738121351006286b797"><code>456ceb7</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/91">#91</a>
from google/update-to-v2.2.1</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/233fa8e7e65e11f2034e681768c97a5098d6d235"><code>233fa8e</code></a>
Update unified workflow example to point to v2.2.1 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/8878e971307bf39737f9a806b05c27485055524d"><code>8878e97</code></a>
Update reusable workflows to point to v2.2.1 actions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/6580e6c1859f468adbb41036916ed6b8d6b49a24"><code>6580e6c</code></a>
"Update actions to use v2.2.1 osv-scanner image"</li>
<li>Additional commits viewable in <a
href="https://github.com/google/osv-scanner-action/compare/b00f71e051ddddc6e46a193c31c8c0bf283bf9e6...90b209d0ea55cea1da9fc0c4e65782cc6acb6e2e">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 761c7c4 commit cff68e6Copy full SHA for cff68e6
File tree
Expand file treeCollapse file tree
1 file changed
+3
-3
lines changedOpen diff view settings
Filter options
- .github/workflows
Expand file treeCollapse file tree
1 file changed
+3
-3
lines changedOpen diff view settings
Collapse file
.github/workflows/osv-scanner.yaml
Copy file name to clipboardExpand all lines: .github/workflows/osv-scanner.yaml+3-3Lines changed: 3 additions & 3 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
101 | 101 | | |
102 | 102 | | |
103 | 103 | | |
104 | | - | |
| 104 | + | |
105 | 105 | | |
106 | 106 | | |
107 | 107 | | |
| |||
119 | 119 | | |
120 | 120 | | |
121 | 121 | | |
122 | | - | |
| 122 | + | |
123 | 123 | | |
124 | 124 | | |
125 | 125 | | |
| |||
131 | 131 | | |
132 | 132 | | |
133 | 133 | | |
134 | | - | |
| 134 | + | |
135 | 135 | | |
136 | 136 | | |
137 | 137 | | |
| |||
0 commit comments