From e88f5e5c741b3689b4e6e4d3778262fb46763ae4 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 10:50:13 +0000 Subject: [PATCH] chore(deps): Update actions/checkout action to v6.1.0 --- .github/workflows/vuln-scan-report.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/vuln-scan-report.yml b/.github/workflows/vuln-scan-report.yml index 0503cfd7e..fab4cc7a6 100644 --- a/.github/workflows/vuln-scan-report.yml +++ b/.github/workflows/vuln-scan-report.yml @@ -26,7 +26,7 @@ jobs: # Tags can be silently repointed to malicious commits (as happened with trivy-action in March 2026). # To update an action: find the new SHA via `gh api repos///git/ref/tags/` - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: @@ -227,7 +227,7 @@ jobs: FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: Read current alpine tag from Dockerfile on main id: current