diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 818c72f25..3a8b9ead4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -66,7 +66,7 @@ jobs: run: pnpm run verify:vendor - name: OSV vulnerability scan - uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0 + uses: google/osv-scanner-action/osv-scanner-action@6e4298ebc4db23e847df9b2e2de2939d6f066c67 # v2.5.1 with: scan-args: |- --config=src-tauri/osv-scanner.toml diff --git a/.github/workflows/security-scheduled.yml b/.github/workflows/security-scheduled.yml index cdd9aabb0..4a47c9f8b 100644 --- a/.github/workflows/security-scheduled.yml +++ b/.github/workflows/security-scheduled.yml @@ -26,7 +26,7 @@ jobs: - name: Scan dependency lockfiles id: osv continue-on-error: true - uses: google/osv-scanner-action/osv-scanner-action@8deb546fdb875b9996d27d4950be7312dac076a1 # v2.5.0 + uses: google/osv-scanner-action/osv-scanner-action@6e4298ebc4db23e847df9b2e2de2939d6f066c67 # v2.5.1 with: scan-args: |- --config=src-tauri/osv-scanner.toml