From 166f04f9c5ad6824693e8878177bfc68683f4088 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 18:33:52 +0000 Subject: [PATCH] chore(deps): bump oras-project/setup-oras from 2.0.2 to 2.0.3 Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 2.0.2 to 2.0.3. - [Release notes](https://github.com/oras-project/setup-oras/releases) - [Commits](https://github.com/oras-project/setup-oras/compare/005458ad77f1c8facd38a094e4af2e69e5607ff4...5e2f2482b30b0cb3e14e67f89a80c88c659a7c63) --- updated-dependencies: - dependency-name: oras-project/setup-oras dependency-version: 2.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/mirror-trivy-db.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/mirror-trivy-db.yaml b/.github/workflows/mirror-trivy-db.yaml index d5f6e02..6407b91 100644 --- a/.github/workflows/mirror-trivy-db.yaml +++ b/.github/workflows/mirror-trivy-db.yaml @@ -60,7 +60,7 @@ jobs: matrix: ${{ fromJson(needs.resolve.outputs.matrix) }} steps: - name: Install oras - uses: oras-project/setup-oras@005458ad77f1c8facd38a094e4af2e69e5607ff4 # v2.0.2 + uses: oras-project/setup-oras@5e2f2482b30b0cb3e14e67f89a80c88c659a7c63 # v2.0.3 - name: Install cosign uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2