diff --git a/.github/workflows/pre_commit.yml b/.github/workflows/pre_commit.yml index 99476058..e6d371d6 100644 --- a/.github/workflows/pre_commit.yml +++ b/.github/workflows/pre_commit.yml @@ -60,7 +60,7 @@ jobs: with: persist-credentials: false - name: Run Zizmor scan - uses: open-edge-platform/anomalib/.github/actions/security/zizmor@fadfedd5150eb8cd39dfb659ae9bd0eb1c06720d + uses: open-edge-platform/anomalib/.github/actions/security/zizmor@90e1192dd7d420cb243a93ce17809e43f23fc36d with: scan-scope: "changed" severity-level: "MEDIUM" @@ -76,7 +76,7 @@ jobs: with: persist-credentials: false - name: Run Bandit scan - uses: open-edge-platform/anomalib/.github/actions/security/bandit@fadfedd5150eb8cd39dfb659ae9bd0eb1c06720d + uses: open-edge-platform/anomalib/.github/actions/security/bandit@90e1192dd7d420cb243a93ce17809e43f23fc36d with: scan-scope: "changed" severity-level: "LOW" diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 5b2ea46e..6630410e 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -24,7 +24,7 @@ jobs: with: persist-credentials: false - name: Run Zizmor scan - uses: open-edge-platform/anomalib/.github/actions/security/zizmor@fadfedd5150eb8cd39dfb659ae9bd0eb1c06720d + uses: open-edge-platform/anomalib/.github/actions/security/zizmor@90e1192dd7d420cb243a93ce17809e43f23fc36d with: scan-scope: "all" severity-level: "LOW" @@ -42,7 +42,7 @@ jobs: with: persist-credentials: false - name: Run Bandit scan - uses: open-edge-platform/anomalib/.github/actions/security/bandit@fadfedd5150eb8cd39dfb659ae9bd0eb1c06720d + uses: open-edge-platform/anomalib/.github/actions/security/bandit@90e1192dd7d420cb243a93ce17809e43f23fc36d with: scan-scope: "all" severity-level: "LOW" @@ -72,7 +72,7 @@ jobs: - name: Run Trivy scan id: trivy - uses: open-edge-platform/anomalib/.github/actions/security/trivy@fadfedd5150eb8cd39dfb659ae9bd0eb1c06720d + uses: open-edge-platform/anomalib/.github/actions/security/trivy@90e1192dd7d420cb243a93ce17809e43f23fc36d with: scan_type: "fs" scan-scope: all