Upgrade osv-scanner to 1.7.4

google / osv-scanner-action

https://google.github.io/osv-scanner/github-action/

Apache License 2.0

12 stars 13 forks source link

Upgrade osv-scanner to 1.7.4 #23

Closed faern closed 3 months ago

faern commented 3 months ago

Upgrading osv-scanner to version 1.7.4. I just copied how #17 did the upgrade last time. We need this in order to run this CI job against our gradle verification-metadata files.

The tool hal the following complete changelog:

Features:

Support scanning gradle/verification-metadata.xml files.

Misc:

Hide unimportant Debian vulnerabilities to reduce noise.

google-cla[bot] commented 3 months ago

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

faern commented 3 months ago

I'm not going to sign a CLA for such a trivial change. I'll just leave this here. Hope you bring the upgrade upstream one way or another :)