Fix code scanning alert for not pinned actions (#28305)

Fixes https://github.com/fleetdm/fleet/security/code-scanning/1381.
This commit is contained in:
Lucas Manuel Rodriguez 2025-04-16 18:35:13 -03:00 committed by GitHub
parent 8246e4013c
commit 5da0008872
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -118,7 +118,7 @@ jobs:
- name: Check high/critical vulnerabilities before publishing (docker scout)
# Only run this on the schedule run or when tagging RCs.
if: startsWith(github.ref, 'rc-minor-') || startsWith(github.ref, 'rc-patch-') || github.event.schedule == '0 4 * * *'
uses: docker/scout-action@v1
uses: docker/scout-action@381b657c498a4d287752e7f2cfb2b41823f566d9 # v1.17.1
with:
command: cves
image: fleetdm/fleet:${{ steps.generate_tag.outputs.FLEET_IMAGE_TAG }}