diff --git a/.github/workflows/anchore-analysis.yml b/.github/workflows/anchore-analysis.yml index 9d1b67b..4a5dbe0 100644 --- a/.github/workflows/anchore-analysis.yml +++ b/.github/workflows/anchore-analysis.yml @@ -14,19 +14,19 @@ permissions: jobs: Anchore-Build-Scan: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - name: Checkout the code uses: actions/checkout@v4 - name: Build the Docker image run: docker build . --file Dockerfile --tag localbuild/testimage:latest - name: Run the Anchore scan action itself with GitHub Advanced Security code scanning integration enabled - uses: anchore/scan-action@main + uses: anchore/scan-action@v6 + id: anchore_scan with: image: "localbuild/testimage:latest" - acs-report-enable: true fail-build: false - name: Upload Anchore Scan Report uses: github/codeql-action/upload-sarif@v3 with: - sarif_file: results.sarif + sarif_file: ${{ steps.anchore_scan.outputs.sarif }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 3487f75..6f6a6a9 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -6,7 +6,7 @@ permissions: jobs: dependency-review: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - name: 'Checkout Repository' uses: actions/checkout@v4 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 96630d8..734a71c 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -7,7 +7,7 @@ permissions: jobs: dockerfile: name: dockerfile - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 - name: Run hadolint @@ -15,7 +15,7 @@ jobs: markdownlint: name: markdown - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 - name: Run markdownlint diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 89a234a..e25f020 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -8,7 +8,7 @@ on: jobs: release: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 00b4aae..162d777 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,7 +8,7 @@ permissions: jobs: build: - runs-on: ubuntu-latest + runs-on: ubuntu-24.04 steps: - uses: actions/checkout@v4 - name: Docker build