Skip to content

Commit ffbc6aa

Browse files
meysholdtona-agent
andcommitted
Upgrade osv-scanner-action from v1.7.1 to v2.0.0
v1.7.1 uses actions/upload-artifact@v3 which GitHub has deprecated, causing the scan-pr job to fail on pull requests. Co-authored-by: Ona <no-reply@ona.com>
1 parent 5bd5e01 commit ffbc6aa

1 file changed

Lines changed: 2 additions & 3 deletions

File tree

.github/workflows/osv-scanner.yml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ permissions:
3030
jobs:
3131
scan-scheduled:
3232
if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }}
33-
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@1f1242919d8a60496dd1874b24b62b2370ed4c78" # v1.7.1
33+
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@98b584ee2ed2da3935ccce10e06739d54cdcd20b" # v2.0.0
3434
with:
3535
fail-on-vuln: false
3636
scan-args: |-
@@ -39,9 +39,8 @@ jobs:
3939
./
4040
scan-pr:
4141
if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
42-
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@1f1242919d8a60496dd1874b24b62b2370ed4c78" # v1.7.1
42+
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@98b584ee2ed2da3935ccce10e06739d54cdcd20b" # v2.0.0
4343
with:
44-
# Example of specifying custom arguments
4544
scan-args: |-
4645
-r
4746
--skip-git

0 commit comments

Comments
 (0)