Bump docker/scout-action from 1.10.0 to 1.11.0

dependabot[bot] commented 1 month ago

Bumps docker/scout-action from 1.10.0 to 1.11.0.

Commits

c854600 Merge 042c71f72db67496d847c609a613382da41a08c5 into fc749439af4870e8f6feb5922...
042c71f [BOT] Publish v1.11.0 release
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

github-actions[bot] commented 1 month ago

:mag: Vulnerabilities of `sommerfeldio/source2adoc:9f17646b6b62600a96d618df49bf16b0c2aafe98`

:package: Image Reference sommerfeldio/source2adoc:9f17646b6b62600a96d618df49bf16b0c2aafe98

digest	`sha256:23ccc19bb6cbd62f34ddd2a8ff7aebc028b1d8ffdceb5139d796a5d850a00e18`
vulnerabilities
size	6.8 MB
packages	21

:package: Base Image alpine:3

also known as	`3.20` `3.20.1` `latest`
digest	`sha256:dabf91b69c191a1a0a1628fd6bdd029c0c4018041c7f052870bb13c5a222ae76`
vulnerabilities

libssl3 3.3.1-r0 (apk)

pkg:apk/alpine/libssl3@3.3.1-r0?arch=x86_64&upstream=openssl&distro=alpine-3.20.1
```dockerfile # Dockerfile (39:39) FROM alpine:3.20.1 AS run ```

Affected range	`<3.3.1-r1`
Fixed version	`3.3.1-r1`
EPSS Score	`0.04%`
EPSS Percentile	`13th percentile`

Description

github-actions[bot] commented 1 month ago

Overview

Image reference	`sommerfeldio/source2adoc:rc`	`sommerfeldio/source2adoc:9f17646b6b62600a96d618df49bf16b0c2aafe98`
- digest	`03605a144917`	`23ccc19bb6cb`
- tag	`rc`	`9f17646b6b62600a96d618df49bf16b0c2aafe98`
- provenance	https://github.com/sommerfeld-io/source2adoc/commit/f4506f9f9fd3f6fca2cdb25894c3db23ffd7cff4	https://github.com/sommerfeld-io/source2adoc/commit/9f17646b6b62600a96d618df49bf16b0c2aafe98
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	6.8 MB	6.8 MB (-1 B)
- packages	25	21 (-4)
Base Image	`alpine:3` also known as: • `3.20` • `3.20.1` • `latest`	`alpine:3.20.1` also known as: • `3` • `3.20` • `latest`
- vulnerabilities

Labels (3 changes)

> * `±` 3 changed > * _9 unchanged_ ```diff maintainer=sebastian@sommerfeld.io org.opencontainers.image.authors=source2adoc open source project -org.opencontainers.image.created=2024-07-09T06:38:01.027Z +org.opencontainers.image.created=2024-07-15T19:28:30.136Z org.opencontainers.image.description=Streamline the process of generating AsciiDoc documentation from inline comments within source code files. This tool converts inline documentation into AsciiDoc files, tailored for seamless integration with Antora. org.opencontainers.image.documentation=https://source2adoc.sommerfeld.io org.opencontainers.image.licenses=NOASSERTION -org.opencontainers.image.revision=f4506f9f9fd3f6fca2cdb25894c3db23ffd7cff4 +org.opencontainers.image.revision=9f17646b6b62600a96d618df49bf16b0c2aafe98 org.opencontainers.image.source=https://github.com/sommerfeld-io/source2adoc org.opencontainers.image.title=source2adoc org.opencontainers.image.url=https://github.com/sommerfeld-io/source2adoc org.opencontainers.image.vendor=source2adoc open source project -org.opencontainers.image.version=main +org.opencontainers.image.version=pr-75 ```

Packages and Vulnerabilities (4 package changes and 0 vulnerability changes)

> * :heavy_minus_sign: 3 packages removed > * :infinity: 1 packages changed > * 20 packages unchanged

Changes for packages of type apk (3 changes)

	Package	Version `sommerfeldio/source2adoc:rc`
:heavy_minus_sign:	ca-certificates	`20240226-r0`
:heavy_minus_sign:	openssl	`3.3.1-r0`

		Removed vulnerabilities (1):
:heavy_minus_sign:	pax-utils	`1.3.7-r2`

Changes for packages of type golang (1 changes)

	Package	Version `sommerfeldio/source2adoc:rc`	Version `sommerfeldio/source2adoc:9f17646b6b62600a96d618df49bf16b0c2aafe98`
:infinity:	stdlib	`go1.22.5`	`1.22.5`

sommerfeld-io / source2adoc