diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index 09a3365c..74c9b9bc 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -34,4 +34,5 @@ jobs: - id: govulncheck uses: golang/govulncheck-action@7da72f730e37eeaad891fcff0a532d27ed737cd4 # v1.0.1 with: + go-version-input: ">= 1.21" check-latest: true diff --git a/.github/workflows/pr-dep-review.yml b/.github/workflows/pr-dep-review.yml index 8aebfab9..11378469 100644 --- a/.github/workflows/pr-dep-review.yml +++ b/.github/workflows/pr-dep-review.yml @@ -21,10 +21,10 @@ jobs: uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Dependency Review - uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0 + uses: actions/dependency-review-action@7bbfa034e752445ea40215fff1c3bf9597993d3f # v3.1.3 with: fail-on-severity: low license-check: true - vulnerability-check: yes + vulnerability-check: true comment-summary-in-pr: on-failure allow-licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, MPL-2.0, MIT