Skip to content

fix: updated semver version#241

Merged
willmurphyscode merged 1 commit intoanchore:mainfrom
gicappa:update-semver-version
Nov 7, 2023
Merged

fix: updated semver version#241
willmurphyscode merged 1 commit intoanchore:mainfrom
gicappa:update-semver-version

Conversation

@gicappa
Copy link
Copy Markdown
Contributor

@gicappa gicappa commented Oct 12, 2023

While updating the action with a new grype version npm run audit fails because of an issue with semver being vulnerable. https://github.com/anchore/scan-action/actions/runs/6479148648/job/17592137397?pr=236

The upgrade of semver is also failing, so the action is stuck with an old grype version.

This commit has an upgraded semver version and a recreated index.js

While updating the action with a new grype version npm run audit
fails because of an issue with semver being vulnerable.
https://github.com/anchore/scan-action/actions/runs/6479148648/job/17592137397?pr=236

The upgrade of semver is also failing, so the action is stuck with
an old grype version.

This commit has an upgraded semver version and a recreated index.js

Signed-off-by: Gian Carlo Pace <[email protected]>
@gicappa gicappa force-pushed the update-semver-version branch from 33307bd to 1fda7ee Compare October 12, 2023 16:56
@willmurphyscode
Copy link
Copy Markdown
Contributor

Thanks very much for the fix @gicappa !

@willmurphyscode willmurphyscode added the dependencies dealing with project dependencies label Nov 7, 2023
@willmurphyscode willmurphyscode merged commit 6decf31 into anchore:main Nov 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies dealing with project dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants