Merge pull request #676 from Nordix/fix/osv-scanner-kashif

🌱 Use osv-scanner workflow file instead of local workflow
metal3-io · Sep 10, 2024 · 323a90b · 323a90b
2 parents c084093 + 12b883a
commit 323a90b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 107 deletions.
diff --git a/.github/workflows/osv-scanner-scan.yml b/.github/workflows/osv-scanner-scan.yml
@@ -14,7 +14,8 @@ permissions: {}
 jobs:
   scan-scheduled:
     permissions:
+      actions: read
       contents: read # to fetch code (actions/checkout)
       security-events: write # for uploading SARIF files
     if: ${{ github.repository == 'metal3-io/ip-address-manager' && github.event_name == 'schedule' }}
-    uses: "./.github/workflows/osv-scanner.yml"
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@4a318af4a84899723625da2927c30fcfb7247126 # v1.8.4
diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml