From 37d66522e892b2b7bfa3d36949df00041265825b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 20 Oct 2026 16:34:23 +0000 Subject: [PATCH] Bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml Bumps [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) from 2.6.0 to 2.7.0. - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/a345acffa64b0eaede81a3d9aae6141214d9c8fc...b1d267aea5211fa648d9d442fa64b90dbdcbdd36) --- updated-dependencies: - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/osv.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/osv.yaml b/.github/workflows/osv.yaml index d585bec24..8faf65dc6 100644 --- a/.github/workflows/osv.yaml +++ b/.github/workflows/osv.yaml @@ -29,7 +29,7 @@ concurrency: jobs: scan-scheduled: if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@b1d267aea5211fa648d9d442fa64b90dbdcbdd36" # v2.7.0 permissions: actions: read # Needed for analysis of GitHub Actions workflows contents: read # To clone and analyze the code