Merge pull request #2321 from Nordix/tuomo/pin-osv-scanner-in-verify-release

metal3-io-bot · web-flow · commit 4b67ab89c3ad · 2025-02-12T21:46:47.000+02:00
🌱 pin osv-scanner image in verify-release.sh
diff --git a/hack/verify-release.sh b/hack/verify-release.sh
@@ -153,7 +153,7 @@ if [[ -n "${CONTAINER_RUNTIME}" ]]; then
         "${CONTAINER_RUNTIME}" run --rm
         -v "${PWD}":/src -w /src
         --pull always
-        ghcr.io/google/osv-scanner:latest
+        ghcr.io/google/osv-scanner:v1.9.2@sha256:239d47ec1a70af430c3cd57524d18e8b2d2dc2f28869384217b64f409ab6650a
     )
 else
     # go install github.com/google/go-containerregistry/cmd/gcrane@latest

Original file line number	Diff line number	Diff line change
`@@ -153,7 +153,7 @@ if [[ -n "${CONTAINER_RUNTIME}" ]]; then`
`153`	`153`	`"${CONTAINER_RUNTIME}" run --rm`
`154`	`154`	`-v "${PWD}":/src -w /src`
`155`	`155`	`--pull always`
`156`		`- ghcr.io/google/osv-scanner:latest`
	`156`	`+ ghcr.io/google/osv-scanner:v1.9.2@sha256:239d47ec1a70af430c3cd57524d18e8b2d2dc2f28869384217b64f409ab6650a`
`157`	`157`	`)`
`158`	`158`	`else`
`159`	`159`	`# go install github.com/google/go-containerregistry/cmd/gcrane@latest`