From 23f8850c0f6fc96b3324529b3f30665d63391634 Mon Sep 17 00:00:00 2001 From: Xueqin Cui Date: Wed, 27 Aug 2025 13:38:53 +1000 Subject: [PATCH 1/3] "Update actions to use v2.2.2 osv-scanner image" --- README.md | 2 +- osv-reporter-action/action.yml | 2 +- osv-scanner-action/action.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index d70adaf..c169589 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # OSV-Scanner CI/CD Action -[![Release v2.2.1](https://img.shields.io/badge/release-v2.2.1-blue?style=flat)](https://github.com/google/osv-scanner-action/releases) +[![Release v2.2.2](https://img.shields.io/badge/release-v2.2.2-blue?style=flat)](https://github.com/google/osv-scanner-action/releases) The OSV-Scanner CI/CD action leverages the [OSV.dev](https://osv.dev/) database and the [OSV-Scanner](https://google.github.io/osv-scanner/) CLI tool to track and notify you of known vulnerabilities in your dependencies for over 11 [languages and ecosystems](https://google.github.io/osv-scanner/supported-languages-and-lockfiles/). diff --git a/osv-reporter-action/action.yml b/osv-reporter-action/action.yml index afb69e9..83ae790 100644 --- a/osv-reporter-action/action.yml +++ b/osv-reporter-action/action.yml @@ -22,7 +22,7 @@ inputs: required: true runs: using: "docker" - image: "docker://ghcr.io/google/osv-scanner-action:v2.2.1" + image: "docker://ghcr.io/google/osv-scanner-action:v2.2.2" entrypoint: /root/osv-reporter args: - "${{ inputs.scan-args }}" diff --git a/osv-scanner-action/action.yml b/osv-scanner-action/action.yml index 80678b3..529195b 100644 --- a/osv-scanner-action/action.yml +++ b/osv-scanner-action/action.yml @@ -24,6 +24,6 @@ inputs: ./ runs: using: "docker" - image: "docker://ghcr.io/google/osv-scanner-action:v2.2.1" + image: "docker://ghcr.io/google/osv-scanner-action:v2.2.2" args: - ${{ inputs.scan-args }} From 9d4732e8b9db0915df9608123133640b58bb6750 Mon Sep 17 00:00:00 2001 From: Xueqin Cui Date: Wed, 27 Aug 2025 13:38:53 +1000 Subject: [PATCH 2/3] Update reusable workflows to point to v2.2.2 actions --- .github/workflows/osv-scanner-reusable-pr.yml | 6 +++--- .github/workflows/osv-scanner-reusable.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/osv-scanner-reusable-pr.yml b/.github/workflows/osv-scanner-reusable-pr.yml index a618585..0fde36c 100644 --- a/.github/workflows/osv-scanner-reusable-pr.yml +++ b/.github/workflows/osv-scanner-reusable-pr.yml @@ -66,7 +66,7 @@ jobs: git checkout $GITHUB_BASE_REF git submodule update --recursive - name: "Run scanner on existing code" - uses: google/osv-scanner-action/osv-scanner-action@6580e6c1859f468adbb41036916ed6b8d6b49a24 # v2.2.1 + uses: google/osv-scanner-action/osv-scanner-action@23f8850c0f6fc96b3324529b3f30665d63391634 # v2.2.2 continue-on-error: true with: scan-args: |- @@ -79,7 +79,7 @@ jobs: git checkout -f $GITHUB_SHA git submodule update --recursive - name: "Run scanner on new code" - uses: google/osv-scanner-action/osv-scanner-action@6580e6c1859f468adbb41036916ed6b8d6b49a24 # v2.2.1 + uses: google/osv-scanner-action/osv-scanner-action@23f8850c0f6fc96b3324529b3f30665d63391634 # v2.2.2 with: scan-args: |- --format=json @@ -87,7 +87,7 @@ jobs: ${{ inputs.scan-args }} continue-on-error: true - name: "Run osv-scanner-reporter" - uses: google/osv-scanner-action/osv-reporter-action@6580e6c1859f468adbb41036916ed6b8d6b49a24 # v2.2.1 + uses: google/osv-scanner-action/osv-reporter-action@23f8850c0f6fc96b3324529b3f30665d63391634 # v2.2.2 with: scan-args: |- --output=${{ inputs.matrix-property }}${{ inputs.results-file-name }} diff --git a/.github/workflows/osv-scanner-reusable.yml b/.github/workflows/osv-scanner-reusable.yml index d467ea4..d2d9a6b 100644 --- a/.github/workflows/osv-scanner-reusable.yml +++ b/.github/workflows/osv-scanner-reusable.yml @@ -77,7 +77,7 @@ jobs: name: "${{ inputs.download-artifact }}" path: "./" - name: "Run scanner" - uses: google/osv-scanner-action/osv-scanner-action@6580e6c1859f468adbb41036916ed6b8d6b49a24 # v2.2.1 + uses: google/osv-scanner-action/osv-scanner-action@23f8850c0f6fc96b3324529b3f30665d63391634 # v2.2.2 with: scan-args: |- --output=${{ inputs.matrix-property }}results.json @@ -85,7 +85,7 @@ jobs: ${{ inputs.scan-args }} continue-on-error: true - name: "Run osv-scanner-reporter" - uses: google/osv-scanner-action/osv-reporter-action@6580e6c1859f468adbb41036916ed6b8d6b49a24 # v2.2.1 + uses: google/osv-scanner-action/osv-reporter-action@23f8850c0f6fc96b3324529b3f30665d63391634 # v2.2.2 with: scan-args: |- --output=${{ inputs.matrix-property }}${{ inputs.results-file-name }} From 4971fe857574947ed156aac249b0ef89a08473be Mon Sep 17 00:00:00 2001 From: Xueqin Cui Date: Wed, 27 Aug 2025 13:38:53 +1000 Subject: [PATCH 3/3] Update unified workflow example to point to v2.2.2 reusable workflows --- .github/workflows/osv-scanner-unified-workflow.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/osv-scanner-unified-workflow.yml b/.github/workflows/osv-scanner-unified-workflow.yml index afe96d9..9743d3d 100644 --- a/.github/workflows/osv-scanner-unified-workflow.yml +++ b/.github/workflows/osv-scanner-unified-workflow.yml @@ -35,7 +35,7 @@ permissions: jobs: scan-scheduled: if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@8878e971307bf39737f9a806b05c27485055524d" # v2.2.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@9d4732e8b9db0915df9608123133640b58bb6750" # v2.2.2 with: # Example of specifying custom arguments scan-args: |- @@ -44,7 +44,7 @@ jobs: ./ scan-pr: if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@8878e971307bf39737f9a806b05c27485055524d" # v2.2.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@9d4732e8b9db0915df9608123133640b58bb6750" # v2.2.2 with: # Example of specifying custom arguments scan-args: |-