Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update enterprise-contract/action-validate-image action to v1.0.374

Detected dependencies

dockerfile

Containerfile

• registry.access.redhat.com/ubi9/ubi-micro latest@sha256:8a6071b01366611fd9433bf9688f5c3150de819874fa2c06c4fcd4c25ea26f03

github-actions

.github/workflows/auto-merge.yaml

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• anchore/sbom-action v0.18.0@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• slsa-framework/slsa-github-generator v2.1.0
• enterprise-contract/action-validate-image v1.0.373

.github/workflows/scorecards.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.1@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
• github/codeql-action v3.28.11@6bb031afdd8eb862ea3fc1848194185e076637e5

tekton

.tekton/build-pipeline.yaml

• quay.io/konflux-ci/tekton-catalog/task-init 0.2@sha256:2f59e9a3c20ce4509356389d327087213cc82c079b30811935837791da140f9f
• quay.io/konflux-ci/tekton-catalog/task-git-clone 0.1@sha256:92cf275b60f7bd23472acc4bc6e9a4bc9a9cbd78a680a23087fa4df668b85a34
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.2@sha256:dfef566290e002e47f766ead3906922a26978a54b84727705a21dec64df7d9a3
• quay.io/konflux-ci/tekton-catalog/task-buildah 0.4@sha256:9ccddd19868ab459b0368af00ec823c82277b684928f18f3d18769a9f5353d12
• quay.io/konflux-ci/tekton-catalog/task-buildah-remote 0.4@sha256:7b97f75251be901918212e9322317974cc2432b92d6456080a70c69fcd4980a2
• quay.io/konflux-ci/tekton-catalog/task-build-image-manifest 0.1@sha256:f982b1844ac1f4841a88bebe5efce6deff16c5334705efc23a2ed057fb1ee5c6
• quay.io/konflux-ci/tekton-catalog/task-source-build 0.2@sha256:2a01b61339c57cc3b27d8f54c271c32ba1db147a957230c6aa7f4f3c95bce6ee
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:5d63b920b71192906fe4d6c4903f594e6f34c5edcff9d21714a08b5edcfbc667
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:1ed16be7d66040bb7eb04c4b252345ff658e1dbdca8274ae7885126ab2214ad1
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.2@sha256:d1ef571fe836984101e2d7f1611a2b7c8c0f8e7d5ad3d9b997fc511f9fd66af6
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.3@sha256:25924ae6b971fa01d2e88d05f04bc99a572261d541d63a7dbc781177c6bc2b27
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.2@sha256:e24eb00ffdb7b45da1c9e1c98f65d68e9f13fd3fce4a4aa9e51df0c7aea14854
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:04f15cbce548e1db7770eee3f155ccb2cc0140a6c371dc67e9a34d83673ea0c0
• quay.io/konflux-ci/tekton-catalog/task-summary 0.2@sha256:870d9a04d9784840a90b7bf6817cd0d0c4edfcda04b1ba1868cae625a3c3bfcc

.tekton/golden-container-pull-request.yaml

.tekton/golden-container-push.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository

[lcarva]

Jobs can be seen here: https://developer.mend.io/github/enterprise-contract/golden-container