Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

This repository currently has no open or pending branches.

Detected dependencies

dockerfile

Containerfile

• registry.access.redhat.com/ubi9/ubi-micro latest@sha256:414cfa255ea10eaef4528a26d5618eb67cf487b635ee20f8f14b9317bfd6a4be

github-actions

.github/workflows/auto-merge.yaml

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sigstore/cosign-installer v3.8.1@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a
• anchore/sbom-action v0.18.0@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• slsa-framework/slsa-github-generator v2.1.0
• enterprise-contract/action-validate-image v1.0.383

.github/workflows/scorecards.yml

• step-security/harden-runner v2.11.0@4d991eb9b905ef189e4c376166672c3f2f230481
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.1@f49aabe0b5af0936a0987cfb85d86b75731b0186
• actions/upload-artifact v4.6.2@ea165f8d65b6e75b540449e92b4886f43607fa02
• github/codeql-action v3.28.13@1b549b9259bda1cb5ddde3b41741a82a2d15a841

tekton

.tekton/build-pipeline.yaml

• quay.io/konflux-ci/tekton-catalog/task-init 0.2@sha256:737682d073a65a486d59b2b30e3104b93edd8490e0cd5e9b4a39703e47363f0f
• quay.io/konflux-ci/tekton-catalog/task-git-clone 0.1@sha256:92cf275b60f7bd23472acc4bc6e9a4bc9a9cbd78a680a23087fa4df668b85a34
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.2@sha256:566272ce2983026d7fbb22b9e6fa855b61dad757e9bea450b32aa85780ca931e
• quay.io/konflux-ci/tekton-catalog/task-buildah 0.4@sha256:4e0d6fc03ab86570afe51c5a191bf191e04112d282247c6b4198f355ee9ebb8c
• quay.io/konflux-ci/tekton-catalog/task-buildah-remote 0.4@sha256:e2ef8a95685db1bfeb5c8934f1f6796067ef631a1ade31f8e38e2b284a5a6ed9
• quay.io/konflux-ci/tekton-catalog/task-build-image-manifest 0.1@sha256:7f4636adfe7482381fbca1cd9ed87d6201205e2eca55270f0a36f1b0375a9291
• quay.io/konflux-ci/tekton-catalog/task-source-build 0.2@sha256:e8c321b8a67e421a9c3975fd9a938ca4e838976064e14c7c0eb4e1f261900b1c
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.5@sha256:5d63b920b71192906fe4d6c4903f594e6f34c5edcff9d21714a08b5edcfbc667
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:53a405f20b041be5cec22e8ac589fde21970b99c7ac447b185e12e57e3dbf001
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.2@sha256:712afcf63f3b5a97c371d37e637efbcc9e1c7ad158872339d00adc6413cd8851
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.3@sha256:e0c1675c9813618910115f04fd6b3a9ff32d1bd4e2b9c975f1112aa1eae0d149
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.2@sha256:62c835adae22e36fce6684460b39206bc16752f1a4427cdbba4ee9afdd279670
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:04f15cbce548e1db7770eee3f155ccb2cc0140a6c371dc67e9a34d83673ea0c0
• quay.io/konflux-ci/tekton-catalog/task-summary 0.2@sha256:870d9a04d9784840a90b7bf6817cd0d0c4edfcda04b1ba1868cae625a3c3bfcc

.tekton/golden-container-pull-request.yaml

.tekton/golden-container-push.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository

[lcarva]

Jobs can be seen here: https://developer.mend.io/github/enterprise-contract/golden-container