From 3bbd165003a714af53daa0c5f3396f34b8421b74 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 09:40:32 +0000 Subject: [PATCH 1/2] Bump the ssdlc-actions group with 2 updates Bumps the ssdlc-actions group with 2 updates: [mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml](https://github.com/mozilla/ssdlc-actions) and [mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml](https://github.com/mozilla/ssdlc-actions). Updates `mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml` from 5cc2b20e42d53d1643853f12244fbec9ed2f2e0c to aa759c845c83060e2473fd8df60f9f408e34675d - [Release notes](https://github.com/mozilla/ssdlc-actions/releases) - [Commits](https://github.com/mozilla/ssdlc-actions/compare/5cc2b20e42d53d1643853f12244fbec9ed2f2e0c...aa759c845c83060e2473fd8df60f9f408e34675d) Updates `mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml` from 1.1 to 1.2 - [Release notes](https://github.com/mozilla/ssdlc-actions/releases) - [Commits](https://github.com/mozilla/ssdlc-actions/compare/507c5535545434e6892219c12d8d56a2b39bf710...aa759c845c83060e2473fd8df60f9f408e34675d) --- updated-dependencies: - dependency-name: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml dependency-version: aa759c845c83060e2473fd8df60f9f408e34675d dependency-type: direct:production dependency-group: ssdlc-actions - dependency-name: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml dependency-version: '1.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ssdlc-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/sbom.yml | 2 +- .github/workflows/ssdlc-actions.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 7f0a0b9..27768bb 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -14,6 +14,6 @@ permissions: jobs: sbom: - uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@5cc2b20e42d53d1643853f12244fbec9ed2f2e0c + uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d with: sbom_name: ${{ github.event.release.tag_name || github.sha }} diff --git a/.github/workflows/ssdlc-actions.yml b/.github/workflows/ssdlc-actions.yml index dc36895..3afb20b 100644 --- a/.github/workflows/ssdlc-actions.yml +++ b/.github/workflows/ssdlc-actions.yml @@ -14,4 +14,4 @@ jobs: code-security-analysis: permissions: security-events: write # required for uploading code scanning alerts - uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@507c5535545434e6892219c12d8d56a2b39bf710 # v1.1 + uses: mozilla/ssdlc-actions/.github/workflows/code-security-analysis-public-repo.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2 From a4e36ef627407f4efd98aa834a503b69694595ba Mon Sep 17 00:00:00 2001 From: Mathieu Pillard Date: Wed, 12 Aug 2026 11:42:36 +0200 Subject: [PATCH 2/2] Update sbom.yml --- .github/workflows/sbom.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 27768bb..fc1cbb0 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -14,6 +14,6 @@ permissions: jobs: sbom: - uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d + uses: mozilla/ssdlc-actions/.github/workflows/ssdlc-sbom.yml@aa759c845c83060e2473fd8df60f9f408e34675d # v1.2 with: sbom_name: ${{ github.event.release.tag_name || github.sha }}