grype_me
Version updated for https://github.com/TomTonic/grype_me to version v.1.3.12-release.
- This action is used across all versions by 0 repositories.
Action Type
This is a Docker action.
Go to the GitHub Marketplace to find the latest changes.
Action Summary
The grype_me GitHub Action automates vulnerability scanning for project supply chains using Anchore Grype, identifying risks in source code dependencies, container images, directories, or SBOMs. It generates detailed vulnerability reports and dynamic shields.io badges that provide an at-a-glance summary of security status, making it ideal for nightly scans of published releases. Key features include pre-bundled vulnerability databases for faster scans, configurable severity thresholds to fail builds, and the ability to focus on vulnerabilities with available fixes.
What’s Changed
What’s Changed
- Update golang to v1.26.2 (fixes 10 CVE’s, see https://github.com/golang/go/issues?q=milestone%3AGo1.26.2+label%3ACherryPickApproved) by @renovate[bot] in https://github.com/TomTonic/grype_me/pull/63
- Update build dependency platformdirs to v4.9.6 by @renovate[bot] in https://github.com/TomTonic/grype_me/pull/64
Full Changelog: https://github.com/TomTonic/grype_me/compare/v1.3.11-release...v.1.3.12-release