t.behrendt/sec-actions

Fork 0

Files

T

History

renovate-bot 96f299fb53

CD / Release (push) Successful in 10s

Details

chore(deps): update actions/cache action to v6 (#65 )

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/cache](https://github.com/actions/cache) | action | major | `v5.1.0` → `v6.1.0` |

---

### Release Notes

<details>
<summary>actions/cache (actions/cache)</summary>

### [`v6.1.0`](https://github.com/actions/cache/releases/tag/v6.1.0)

[Compare Source](https://github.com/actions/cache/compare/v6.0.0...v6.1.0)

##### What's Changed

- Bump [@&#8203;actions/cache](https://github.com/actions/cache) to v6.1.0 - handle read-only cache access by [@&#8203;jasongin](https://github.com/jasongin) in [#&#8203;1768](https://github.com/actions/cache/pull/1768)

**Full Changelog**: <https://github.com/actions/cache/compare/v6...v6.1.0>

### [`v6.0.0`](https://github.com/actions/cache/releases/tag/v6.0.0)

[Compare Source](https://github.com/actions/cache/compare/v6.0.0...v6.0.0)

##### What's Changed

- Update packages, migrate to ESM by [@&#8203;Samirat](https://github.com/Samirat) in [#&#8203;1760](https://github.com/actions/cache/pull/1760)

**Full Changelog**: <https://github.com/actions/cache/compare/v5...v6.0.0>

### [`v6`](https://github.com/actions/cache/compare/v5.1.0...v6.0.0)

[Compare Source](https://github.com/actions/cache/compare/v5.1.0...v6.0.0)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNjMuOSIsInVwZGF0ZWRJblZlciI6IjQzLjI2My45IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJhY3Rpb24iLCJkZXBzIl19-->

Reviewed-on: #65
Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

2026-07-19 08:07:50 +02:00

action.yaml

chore(deps): update actions/cache action to v6 (#65 )

2026-07-19 08:07:50 +02:00

README.md

refactor!: to osv-scanner (#51 )

2026-07-18 10:24:01 +02:00

README.md

Setup OSV Scanner Action

A reusable Gitea Action that downloads and sets up the osv-scanner binary for vulnerability scanning.

The downloaded binary is verified against a pinned SHA-256 digest for the runner architecture.

Usage

Basic Usage

- name: Setup OSV Scanner
  uses: your-username/osv-scanner-actions@main/setup-osv
  with:
    version: "v2.4.0"
    amd64-digest: "15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0"
    arm64-digest: "44e580752910f0ff36ec99aff59af20f65df1e859aa31e5605a8f0d055b496e9"

Digests are published in each release's osv-scanner_SHA256SUMS file (e.g. for osv-scanner_linux_amd64 / osv-scanner_linux_arm64). You may pass either bare hex or sha256:<hex>.

Complete Example

name: Security Scan
on: [push, pull_request]

jobs:
  security:
    runs-on:
      - ubuntu-latest
      - linux_amd64
    steps:
      - uses: actions/checkout@v4
      - name: Setup OSV Scanner
        uses: your-username/osv-scanner-actions@main/setup-osv
        with:
          version: "v2.4.0"
          amd64-digest: "15314940c10d26af9c6649f150b8a47c1262e8fc7e17b1d1029b0e479e8ed8a0"
          arm64-digest: "44e580752910f0ff36ec99aff59af20f65df1e859aa31e5605a8f0d055b496e9"
      - name: Scan for vulnerabilities
        run: osv-scanner scan source -r .

Inputs

Input	Description	Required	Default
`version`	Explicit osv-scanner release tag (e.g. `v2.4.0`). `latest` is rejected	Yes	—
`amd64-digest`	SHA-256 of `osv-scanner_linux_amd64` (hex or `sha256:<hex>`)	Yes	—
`arm64-digest`	SHA-256 of `osv-scanner_linux_arm64` (hex or `sha256:<hex>`)	Yes	—