Skip to content

chore(deps): bump attested-delivery/.github/.github/workflows/reusable-scorecard.yml from ca91728c87beb08742325b4ed4d06fcfb261435b to ee1f93b566abc109efa0588d3d5308b4dd4a7492 - #31

Merged
zircote merged 2 commits into
mainfrom
dependabot/github_actions/attested-delivery/dot-github/dot-github/workflows/reusable-scorecard.yml-ee1f93b566abc109efa0588d3d5308b4dd4a7492
Jul 15, 2026
Merged

chore(deps): bump attested-delivery/.github/.github/workflows/reusable-scorecard.yml from ca91728c87beb08742325b4ed4d06fcfb261435b to ee1f93b566abc109efa0588d3d5308b4dd4a7492#31
zircote merged 2 commits into
mainfrom
dependabot/github_actions/attested-delivery/dot-github/dot-github/workflows/reusable-scorecard.yml-ee1f93b566abc109efa0588d3d5308b4dd4a7492

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps attested-delivery/.github/.github/workflows/reusable-scorecard.yml from ca91728c87beb08742325b4ed4d06fcfb261435b to ee1f93b566abc109efa0588d3d5308b4dd4a7492.

Commits
  • ee1f93b fix(reusable-trivy): authenticate to GHCR before scanning image-ref (#33)
  • f0c5cba fix(sign-and-attest): disable release-asset upload on image SBOM step (#32)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github-actions labels Jul 13, 2026
@zircote

zircote commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@zircote

zircote commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@zircote

zircote commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

…e-scorecard.yml

Bumps [attested-delivery/.github/.github/workflows/reusable-scorecard.yml](https://github.com/attested-delivery/.github) from ca91728c87beb08742325b4ed4d06fcfb261435b to ee1f93b566abc109efa0588d3d5308b4dd4a7492.
- [Release notes](https://github.com/attested-delivery/.github/releases)
- [Commits](attested-delivery/.github@ca91728...ee1f93b)

---
updated-dependencies:
- dependency-name: attested-delivery/.github/.github/workflows/reusable-scorecard.yml
  dependency-version: ee1f93b566abc109efa0588d3d5308b4dd4a7492
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/attested-delivery/dot-github/dot-github/workflows/reusable-scorecard.yml-ee1f93b566abc109efa0588d3d5308b4dd4a7492 branch from 89a0a30 to 5068516 Compare July 15, 2026 17:07
@zircote
zircote merged commit bbef2bc into main Jul 15, 2026
42 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/attested-delivery/dot-github/dot-github/workflows/reusable-scorecard.yml-ee1f93b566abc109efa0588d3d5308b4dd4a7492 branch July 15, 2026 17:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant