Merge pull request #19 from hanzoai/dependabot/github_actions/anchore/sbom-action-0.23.1

Bump anchore/sbom-action from 0.22.2 to 0.24.0
This commit is contained in:
Hanzo Dev
2026-06-04 01:32:05 -07:00
committed by GitHub
+1 -1
View File
@@ -39,7 +39,7 @@ jobs:
- name: Install syft
# Use commit hash here to avoid a re-tagging attack, as this is a third-party action
# Commit 28d71544de8eaf1b958d335707167c5f783590ad = tag v0.22.2
uses: anchore/sbom-action/download-syft@28d71544de8eaf1b958d335707167c5f783590ad
uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610
with:
syft-version: "v1.41.2"