github-actions[bot]
commented
6 months ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details |
|---|---|---|---|
| actions/actions/attest-build-provenance | f8d5ea8082b0d9f5ab855907be308fbd7eefb155 | Unknown | Unknown |
| actions/actions/attest-build-provenance | 897ed5eab6ed058a474202017ada7f40bfa52940 | Unknown | Unknown |
Scanned Manifest Files
.github/workflows/push-tag.yml
- actions/attest-build-provenance@f8d5ea8082b0d9f5ab855907be308fbd7eefb155
- actions/attest-build-provenance@897ed5eab6ed058a474202017ada7f40bfa52940
This PR contains the following updates:
v1.0.0->v1.1.0Release Notes
actions/attest-build-provenance (actions/attest-build-provenance)
### [`v1.1.0`](https://togithub.com/actions/attest-build-provenance/releases/tag/v1.1.0) [Compare Source](https://togithub.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0) #### What's Changed - Bump actions/attest to v1.1.0 by [@bdehamer](https://togithub.com/bdehamer) in [https://github.com/actions/attest-build-provenance/pull/65](https://togithub.com/actions/attest-build-provenance/pull/65) - adds list support for `subjectPath` input - limit attestation subject count - ensure subject globs match only files **Full Changelog**: https://github.com/actions/attest-build-provenance/compare/v1.0.0...v1.1.0Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.