t.behrendt/sec-actions

Fork 0

Files

T

History

renovate-bot 96f299fb53

CD / Release (push) Successful in 10s

Details

chore(deps): update actions/cache action to v6 (#65 )

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/cache](https://github.com/actions/cache) | action | major | `v5.1.0` → `v6.1.0` |

---

### Release Notes

<details>
<summary>actions/cache (actions/cache)</summary>

### [`v6.1.0`](https://github.com/actions/cache/releases/tag/v6.1.0)

[Compare Source](https://github.com/actions/cache/compare/v6.0.0...v6.1.0)

##### What's Changed

- Bump [@&#8203;actions/cache](https://github.com/actions/cache) to v6.1.0 - handle read-only cache access by [@&#8203;jasongin](https://github.com/jasongin) in [#&#8203;1768](https://github.com/actions/cache/pull/1768)

**Full Changelog**: <https://github.com/actions/cache/compare/v6...v6.1.0>

### [`v6.0.0`](https://github.com/actions/cache/releases/tag/v6.0.0)

[Compare Source](https://github.com/actions/cache/compare/v6.0.0...v6.0.0)

##### What's Changed

- Update packages, migrate to ESM by [@&#8203;Samirat](https://github.com/Samirat) in [#&#8203;1760](https://github.com/actions/cache/pull/1760)

**Full Changelog**: <https://github.com/actions/cache/compare/v5...v6.0.0>

### [`v6`](https://github.com/actions/cache/compare/v5.1.0...v6.0.0)

[Compare Source](https://github.com/actions/cache/compare/v5.1.0...v6.0.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjMuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI2My45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->

Reviewed-on: #65
Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

2026-07-19 08:07:50 +02:00

action.yaml

chore(deps): update actions/cache action to v6 (#65 )

2026-07-19 08:07:50 +02:00

README.md

refactor!: to osv-scanner (#51 )

2026-07-18 10:24:01 +02:00

README.md

Setup DB Action

A reusable Gitea Action that sets up the osv-scanner offline vulnerability database, restoring from cache if available.

Note: This action only sets up the database. osv-scanner itself must be installed separately (e.g., using the setup-osv action). Subsequent steps receive OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY via the environment.

Usage

Basic Usage

- name: Setup DB
  uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1

Complete Example

name: Security Scan
on: [push, pull_request]

jobs:
  security:
    runs-on:
      - ubuntu-latest
      - linux_amd64
    steps:
      - uses: actions/checkout@v4
      - name: Setup OSV Scanner
        uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-osv@0.0.1
        with:
          version: "v2.4.0"
          amd64-digest: "15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0"
          arm64-digest: "44e580752910f0ff36ec99aff59af20f65df1e859aa31e5605a8f0d055b496e9"
      - name: Setup DB
        id: setup-db
        uses: https://gitea.t000-n.de/t.behrendt/osv-scanner-actions/setup-db@0.0.1
      - name: Scan for vulnerabilities
        run: osv-scanner scan source --offline-vulnerabilities -r .

Inputs

Input	Description	Required	Default
`cache-dir`	Path used as `OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY`	No	`${{ runner.temp }}/osv-scanner`
`ecosystems`	Comma-separated OSV ecosystems to download; empty downloads all ecosystems	No	(all)

Outputs

Output	Description
`cache-dir`	Path to the osv-scanner local DB cache directory