From 442e247ec17e26786ee58728f7aec1ba77a35884 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 00:01:51 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/upload-artifact from 6 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 584b937..3871d9f 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -106,7 +106,7 @@ jobs: category: trivy-app-linux-arm64-${{ matrix.tag }} - name: Save vulnerability reports - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: trivy-app-${{ matrix.tag }} path: trivy-results/*.sarif @@ -158,7 +158,7 @@ jobs: category: trivy-web-linux-arm64 - name: Save vulnerability reports - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 with: name: trivy-web path: trivy-results/*.sarif From 4b659eece45ed60b3e4c53c68a78caef9786675d Mon Sep 17 00:00:00 2001 From: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> Date: Wed, 21 Oct 2026 00:14:50 +0000 Subject: [PATCH 2/2] fix(ci): pin upload-artifact to verified v7.0.2 commit Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com> --- .github/workflows/docker-image.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 3871d9f..cbc458f 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -106,7 +106,7 @@ jobs: category: trivy-app-linux-arm64-${{ matrix.tag }} - name: Save vulnerability reports - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: trivy-app-${{ matrix.tag }} path: trivy-results/*.sarif @@ -158,7 +158,7 @@ jobs: category: trivy-web-linux-arm64 - name: Save vulnerability reports - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: trivy-web path: trivy-results/*.sarif