From 04ce651f37c96a3cf21090f010e55a98ad5e00b1 Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Thu, 5 Nov 2026 12:47:08 +0100 Subject: [PATCH 1/2] Pin image-pipeline to v1.0.0 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e52ee57..e534b3c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -178,7 +178,7 @@ jobs: - name: Import release artifacts for scanning run: docker import artifact-scan/rootfs.tar stackstate-backup-cli:security-scan - name: Scan release artifacts with Trivy, Grype, and VEX - uses: StackVista/image-pipeline/.github/actions/scan-image@d847894223a794b4f4834654af20a04278b16b4f # main + uses: StackVista/image-pipeline/.github/actions/scan-image@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 with: image: stackstate-backup-cli:security-scan mode: inform From 582988efb34bc67e5bd38b6eb7c987444a422eab Mon Sep 17 00:00:00 2001 From: Remco Beckers Date: Thu, 5 Nov 2026 15:11:27 +0100 Subject: [PATCH 2/2] Pin image-pipeline to v1.0.1 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e534b3c..9f2a5fd 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -178,7 +178,7 @@ jobs: - name: Import release artifacts for scanning run: docker import artifact-scan/rootfs.tar stackstate-backup-cli:security-scan - name: Scan release artifacts with Trivy, Grype, and VEX - uses: StackVista/image-pipeline/.github/actions/scan-image@6869879307d976158fa07ee5bff27ceb8eb031af # v1.0.0 + uses: StackVista/image-pipeline/.github/actions/scan-image@79dd6718168651ffc846eed98c3c0cb646eb15a0 # v1.0.1 with: image: stackstate-backup-cli:security-scan mode: inform