diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index bce942284..08a180294 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -62,7 +62,7 @@ workflows: - 'hadolint/hadolint-action@v3.5.0' '.github/workflows/vulnetix.yml': - 'actions/checkout@v7' - - 'vulnetix/cli@v4.24.3' + - 'vulnetix/cli@v4.24.30' dependencies: 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8': ref: 'v4.2.2' @@ -202,13 +202,13 @@ dependencies: commit: 'sha1-6f9f17788090df1f26f669e9d70d6ae9567deba6' owner_id: 71096353 repo_id: 351211695 - 'vulnetix/cli@v4.24.3': - ref: 'v4.24.3' - commit: 'sha1-cd3503489e131a1ba76c7fd696687ae07a6cd3c9' + 'vulnetix/cli@v4.24.30': + ref: 'v4.24.30' + commit: 'sha1-720f8cc1c565f2454bfd6687d25a391e67bf6b09' owner_id: 178014019 repo_id: 809336204 uses: - 'actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8' - 'actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6' - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' - - 'sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6' + - 'sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532' diff --git a/.github/workflows/vulnetix.yml b/.github/workflows/vulnetix.yml index 5f649483d..20a47f2e5 100644 --- a/.github/workflows/vulnetix.yml +++ b/.github/workflows/vulnetix.yml @@ -23,7 +23,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/secrets@v4.24.3 + - uses: Vulnetix/cli/secrets@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -51,7 +51,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sast@v4.24.3 + - uses: Vulnetix/cli/sast@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -76,7 +76,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sca/go@v4.24.3 + - uses: Vulnetix/cli/sca/go@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -84,7 +84,7 @@ jobs: fail-on-findings: false github-code-scanning: ${{ github.event_name == 'push' }} github-token: ${{ github.event_name != 'pull_request' && github.token || '' }} - - uses: Vulnetix/cli/sca@v4.24.3 + - uses: Vulnetix/cli/sca@v4.24.30 if: ${{ !cancelled() }} with: org-id: ${{ secrets.VULNETIX_ORG_ID }} @@ -104,7 +104,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/iac@v4.24.3 + - uses: Vulnetix/cli/iac@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -130,7 +130,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/containers@v4.24.3 + - uses: Vulnetix/cli/containers@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -155,7 +155,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/license@v4.24.3 + - uses: Vulnetix/cli/license@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -170,7 +170,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/cbom@v4.24.3 + - uses: Vulnetix/cli/cbom@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -184,7 +184,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/aibom@v4.24.3 + - uses: Vulnetix/cli/aibom@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -207,7 +207,7 @@ jobs: - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: Vulnetix/cli/analyze@v4.24.3 + - uses: Vulnetix/cli/analyze@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -226,7 +226,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sbom@v4.24.3 + - uses: Vulnetix/cli/sbom@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -242,7 +242,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/gha-status@v4.24.3 + - uses: Vulnetix/cli/gha-status@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -254,12 +254,12 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sast@v4.24.3 + - uses: Vulnetix/cli/sast@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} fail-on-findings: false - - uses: Vulnetix/cli/github-advisories@v4.24.3 + - uses: Vulnetix/cli/github-advisories@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -272,12 +272,12 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sbom@v4.24.3 + - uses: Vulnetix/cli/sbom@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} fail-on-findings: false - - uses: Vulnetix/cli/bom-validate@v4.24.3 + - uses: Vulnetix/cli/bom-validate@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -290,9 +290,9 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/setup@v4.24.3 + - uses: Vulnetix/cli/setup@v4.24.30 - run: vulnetix license policy init --no-banner - - uses: Vulnetix/cli/license-policy-validate@v4.24.3 + - uses: Vulnetix/cli/license-policy-validate@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -304,9 +304,9 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/setup@v4.24.3 + - uses: Vulnetix/cli/setup@v4.24.30 - run: vulnetix license exceptions add --no-banner --license MPL-2.0 --reason dogfood --approver security@vulnetix.com --expires 2030-01-01 - - uses: Vulnetix/cli/license-exceptions-check@v4.24.3 + - uses: Vulnetix/cli/license-exceptions-check@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -318,7 +318,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/ai-firewall-apply@v4.24.3 + - uses: Vulnetix/cli/ai-firewall-apply@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -333,7 +333,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/image@v4.24.3 + - uses: Vulnetix/cli/image@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -348,7 +348,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/vex@v4.24.3 + - uses: Vulnetix/cli/vex@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -364,7 +364,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/jail@v4.24.3 + - uses: Vulnetix/cli/jail@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -376,7 +376,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/setup@v4.24.3 + - uses: Vulnetix/cli/setup@v4.24.30 - run: vulnetix version --no-banner - run: "vulnetix auth verify --no-banner || true" @@ -386,12 +386,12 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/sbom@v4.24.3 + - uses: Vulnetix/cli/sbom@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} fail-on-findings: false - - uses: Vulnetix/cli/upload@v4.24.3 + - uses: Vulnetix/cli/upload@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -407,7 +407,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/config-plan@v4.24.3 + - uses: Vulnetix/cli/config-plan@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }} @@ -425,7 +425,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7 - - uses: Vulnetix/cli/gha-upload@v4.24.3 + - uses: Vulnetix/cli/gha-upload@v4.24.30 with: org-id: ${{ secrets.VULNETIX_ORG_ID }} api-key: ${{ secrets.VULNETIX_API_KEY }}