From 9e73a92dc2dd9b05958e0418b511c6df00998ab0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 12:24:05 +0000 Subject: [PATCH] Bump google/osv-scanner-action/osv-scanner-action from 2.2.4 to 2.7.0 Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from 2.2.4 to 2.7.0. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/9bb69575e74019c2ad085a1860787043adf47ccb...b1d267aea5211fa648d9d442fa64b90dbdcbdd36) --- updated-dependencies: - dependency-name: google/osv-scanner-action/osv-scanner-action dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/osv-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/osv-scan.yml b/.github/workflows/osv-scan.yml index 64b9f4a..2ac9a4c 100644 --- a/.github/workflows/osv-scan.yml +++ b/.github/workflows/osv-scan.yml @@ -48,6 +48,6 @@ jobs: - name: Resolve the dependency tree as an SBOM run: mvn -B -ntp org.cyclonedx:cyclonedx-maven-plugin:makeAggregateBom - name: OSV scan - uses: google/osv-scanner-action/osv-scanner-action@9bb69575e74019c2ad085a1860787043adf47ccb # v2.2.4 + uses: google/osv-scanner-action/osv-scanner-action@b1d267aea5211fa648d9d442fa64b90dbdcbdd36 # v2.7.0 with: scan-args: -L target/bom.cdx.json