github-actions[bot]
commented
2 months ago Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.
OpenSSF Scorecard
| Package | Version | Score | Details |
|---|---|---|---|
| actions/actions/attest-build-provenance | 1c608d11d69870c2092266b3f9a6f3abbf17002c | Unknown | Unknown |
Scanned Manifest Files
.github/workflows/push-tag.yml
- actions/attest-build-provenance@1c608d11d69870c2092266b3f9a6f3abbf17002c
- actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1
This PR contains the following updates:
v1.4.2->v1.4.3Release Notes
actions/attest-build-provenance (actions/attest-build-provenance)
### [`v1.4.3`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v1.4.3) [Compare Source](https://redirect.github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3) #### What's Changed - Bump predicate from 1.1.2 to 1.1.3 by [@bdehamer](https://redirect.github.com/bdehamer) in [https://github.com/actions/attest-build-provenance/pull/226](https://redirect.github.com/actions/attest-build-provenance/pull/226) - Bump [@actions/attest](https://redirect.github.com/actions/attest) from 1.3.1 to 1.4.1 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/attest-build-provenance/pull/212](https://redirect.github.com/actions/attest-build-provenance/pull/212) - Bump [@actions/attest](https://redirect.github.com/actions/attest) from 1.4.1 to 1.4.2 by [@bdehamer](https://redirect.github.com/bdehamer) in [https://github.com/actions/attest-build-provenance/pull/225](https://redirect.github.com/actions/attest-build-provenance/pull/225) - Fix bug w/ customized OIDC issuer URL for enterprise accounts ([#222](https://redirect.github.com/actions/attest-build-provenance/issues/222)) **Full Changelog**: https://github.com/actions/attest-build-provenance/compare/v1.4.2...v1.4.3Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.