From 9744ad9011923b94e6c06460a7e29207c777c8fb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 27 Jul 2026 09:20:35 +0000 Subject: [PATCH] chore(docker): bump the docker group across 1 directory with 4 updates Bumps the docker group with 4 updates in the /versions directory: [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog), [anchore/syft](https://github.com/anchore/syft), [anchore/grype](https://github.com/anchore/grype) and semgrep/semgrep. Updates `trufflesecurity/trufflehog` from 3.95.2 to 3.96.0 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.95.2...v3.96.0) Updates `anchore/syft` from v1.44.0 to v1.49.0 - [Release notes](https://github.com/anchore/syft/releases) - [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/syft/compare/v1.44.0...v1.49.0) Updates `anchore/grype` from v0.112.0 to v0.116.0 - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/grype/compare/v0.112.0...v0.116.0) Updates `semgrep/semgrep` from 1.161.0 to 1.170.1 --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.96.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker - dependency-name: anchore/syft dependency-version: v1.49.0 dependency-type: direct:production dependency-group: docker - dependency-name: anchore/grype dependency-version: v0.116.0 dependency-type: direct:production dependency-group: docker - dependency-name: semgrep/semgrep dependency-version: 1.170.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker ... Signed-off-by: dependabot[bot] --- versions/Dockerfile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/versions/Dockerfile b/versions/Dockerfile index e59e2b6..648de2e 100644 --- a/versions/Dockerfile +++ b/versions/Dockerfile @@ -18,10 +18,10 @@ # to do that (in-place literal-string replace via Python), commit, # push. -FROM ghcr.io/trufflesecurity/trufflehog:3.95.2@sha256:49d1c4fbbc580aac487ac7cb0517bb085826bd352d7578d62bb4c0c6b7205075 AS trufflehog -FROM ghcr.io/anchore/syft:v1.44.0@sha256:86fde6445b483d902fe011dd9f68c4987dd94e07da1e9edc004e3c2422650de6 AS syft +FROM ghcr.io/trufflesecurity/trufflehog:3.96.0@sha256:aa821cf4ace8861c7d096d83818cdf7bb9719028a52d37a52eaad44086a52577 AS trufflehog +FROM ghcr.io/anchore/syft:v1.49.0@sha256:13b53ebabe3d215268c90cf8fb9b875f0183908245f376fd4b3a2cb69d21d484 AS syft FROM public.ecr.aws/aquasecurity/trivy:0.70.0@sha256:be1190afcb28352bfddc4ddeb71470835d16462af68d310f9f4bca710961a41e AS trivy -FROM ghcr.io/anchore/grype:v0.112.0@sha256:391bfda62888fb4e98ff5c4c81598f7431a3c1eac3f8519d69d1ff00df247c1d AS grype -FROM semgrep/semgrep:1.161.0@sha256:326e5f41cc972bb423b764a14febbb62bbad29ee1c01820805d077dd868fea48 AS semgrep +FROM ghcr.io/anchore/grype:v0.116.0@sha256:fd4ab4d1042b522c896e73bdf09ab8bf384fa417df99d6dd0d6e1008c7e7c821 AS grype +FROM semgrep/semgrep:1.170.1@sha256:98c2572fced2474539fd27cab3207ebd8e95e4e7aab4c3b381fdc5e2641d9941 AS semgrep FROM rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667 AS actionlint FROM koalaman/shellcheck:v0.11.0@sha256:61862eba1fcf09a484ebcc6feea46f1782532571a34ed51fedf90dd25f925a8d AS shellcheck