fix: use different security-actions version

Kong · Oct 23, 2024 · bfb2f45 · bfb2f45
1 parent 42cfe58
commit bfb2f45
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
@@ -27,7 +27,7 @@ jobs:
       # (TODO): Produce workspace/package specific SBOM. Current limitation: https://github.com/anchore/syft/issues/2574
       # (TODO): needs check (block) further steps if SCA fails
       - id: sca-project
-        uses: Kong/public-shared-actions/security-actions/sca@62643b74f79f6a697b9add1a2f9c069bf9ca1250 # v2.3.0
+        uses: Kong/public-shared-actions/security-actions/sca@28d20a1f492927f35b00b317acd78f669c45f88b # v2.7.3
         with:
           dir: .
           upload-sbom-release-assets: false
@@ -205,7 +205,7 @@ jobs:
       - name: Scan inso docker artifacts
         id: sbom_action
         if: matrix.os == 'ubuntu-latest'
-        uses: Kong/public-shared-actions/security-actions/scan-docker-image@62643b74f79f6a697b9add1a2f9c069bf9ca1250 # v2.3.0
+        uses: Kong/public-shared-actions/security-actions/scan-docker-image@28d20a1f492927f35b00b317acd78f669c45f88b # v2.7.3
         with:
           asset_prefix: image-inso-${{ runner.os }}
           image: ./packages/${{ env.INSO_PACKAGE_NAME }}/artifacts/${{ env.INSO_DOCKER_TAR }}