From 3dee21166401c9b2929d5881bcf74dc84847ac97 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 28 Jul 2026 13:49:34 +0000 Subject: [PATCH] chore(deps): bump SadPossum/GMA-Skeleton/.github/actions/security-baseline Bumps [SadPossum/GMA-Skeleton/.github/actions/security-baseline](https://github.com/sadpossum/gma-skeleton) from 32ec053c78a87f5b5941068eb449e7ae10f51f59 to 411117c46992d32bf4ec195d4b86125838065756. - [Release notes](https://github.com/sadpossum/gma-skeleton/releases) - [Commits](https://github.com/sadpossum/gma-skeleton/compare/32ec053c78a87f5b5941068eb449e7ae10f51f59...411117c46992d32bf4ec195d4b86125838065756) --- updated-dependencies: - dependency-name: SadPossum/GMA-Skeleton/.github/actions/security-baseline dependency-version: 9d2bd026cace696cf0c3cd0f307dc374728d6c32 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/release-evidence.yml | 2 +- .github/workflows/security.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release-evidence.yml b/.github/workflows/release-evidence.yml index d083975..d7d67b7 100644 --- a/.github/workflows/release-evidence.yml +++ b/.github/workflows/release-evidence.yml @@ -41,7 +41,7 @@ jobs: } - name: Scan release source and create SBOM - uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@32ec053c78a87f5b5941068eb449e7ae10f51f59 + uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@411117c46992d32bf4ec195d4b86125838065756 with: output-directory: artifacts/release-security exception-file: .gma/security-exceptions.json diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 26cfb68..e17c592 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -39,7 +39,7 @@ jobs: run: ./eng/check-repository-release.ps1 - name: Run repository security baseline - uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@32ec053c78a87f5b5941068eb449e7ae10f51f59 + uses: SadPossum/GMA-Skeleton/.github/actions/security-baseline@411117c46992d32bf4ec195d4b86125838065756 with: exception-file: .gma/security-exceptions.json