Bump anchore/scan-action from 3 to 4

[dependabot[bot]]

Bumps anchore/scan-action from 3 to 4.

Release notes

Sourced from anchore/scan-action's releases.

v4.0.0

New in scan-action v4.0.0

• chore(deps): update Grype to v0.79.2 (#338) [anchore-actions-token-generator]
• fix: download Grype directly on Windows (#336) [willmurphyscode]
• chore(deps-dev): bump prettier from 3.2.5 to 3.3.0 (#323) [dependabot]
• chore(deps): update Grype to v0.78.0 (#322) [anchore-actions-token-generator]
• chore(deps): update Grype to v0.77.4 (#317) [anchore-actions-token-generator]
• fix: download grype on windows runners (#315) [kzantow]
• chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#314) [dependabot]
• chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#310) [dependabot]
• chore(deps): update Grype to v0.77.3 (#311) [anchore-actions-token-generator]
• chore(deps): update Grype to v0.77.2 (#290) [anchore-actions-token-generator]
• chore(deps): bump actions/checkout from 4.1.1 to 4.1.4 (#307) [dependabot]
• chore(deps): bump peter-evans/create-pull-request from 6.0.3 to 6.0.5 (#308) [dependabot]
• chore(deps): bump peter-evans/create-pull-request from 6.0.1 to 6.0.3 (#301) [dependabot]
• chore(deps): bump peter-evans/create-pull-request from 6.0.0 to 6.0.1 (#291) [dependabot]
• Bump Node to v20 on download-grype action (#295) [ViacheslavKudinov]
• chore(deps): bump release-drafter/release-drafter from 5.25.0 to 6.0.0 (#284) [dependabot]
• chore(deps-dev): bump husky from 8.0.3 to 9.0.11 (#287) [dependabot]
• chore(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.0 (#281) [dependabot]
• chore(deps-dev): bump prettier from 3.2.4 to 3.2.5 (#283) [dependabot]
• chore(deps-dev): bump eslint from 8.56.0 to 8.57.0 (#289) [dependabot]
• chore(deps): update Grype to v0.74.6 (#288) [anchore-actions-token-generator]
• chore(deps): update Grype to v0.74.5 (#286) [anchore-actions-token-generator]
• chore(deps-dev): bump lint-staged from 15.2.0 to 15.2.2 (#285) [dependabot]

v3.6.4

New in scan-action v3.6.4

• Update Grype to v0.74.4 (#279) [anchore-actions-token-generator]

v3.6.3

New in scan-action v3.6.3

• chore: migrate action to use node v20.11.0 (Iron) FROM node v16.x.x (#278) [spiffcs]

v3.6.2

New in scan-action v3.6.2

• chore(deps): update Grype to v0.74.3 (#275) [anchore-actions-token-generator]

v3.6.1

New in scan-action v3.6.1

• chore(deps): update Grype to v0.74.2 (#272) [anchore-actions-token-generator]
• chore(deps-dev): bump prettier from 3.2.2 to 3.2.4 (#270) [dependabot]

v3.6.0

New in scan-action v3.6.0

... (truncated)

Changelog

Sourced from anchore/scan-action's changelog.

Release Notes

Version 2.0.2 - 2020-11-11

• Update actions/core to use version 1.2.6 [(Issue #71)](anchore/scan-action#71)

Version 2.0.1 - 2020-02-11

Fixes:

• Removes unnecessary constraint in deduplication for SARIF reporting
• Allows defining and referencing the location of the SARIF report file
• Fixes multiple instances where undefined items in the reporting would break scanning

Commits

• 04b73ec chore(deps): update Grype to v0.79.2 (#338)
• 69a534f fix: download Grype directly on Windows (#336)
• d09e278 chore(deps-dev): bump prettier from 3.2.5 to 3.3.0 (#323)
• 51f3c1c chore(deps): update Grype to v0.78.0 (#322)
• 63b2dc4 chore(deps): update Grype to v0.77.4 (#317)
• b4a7247 fix: Windows runners (#315)
• 30b718a chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#314)
• 04171b1 chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#310)
• 666b3dc chore(deps): update Grype to v0.77.3 (#311)
• 8c83d2c chore(deps): update Grype to v0.77.2 (#290)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)