From 4c461cb682c07b3ded77bbe831cc9ee6169d94dd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 09:19:43 +0000 Subject: [PATCH] chore(docker): bump the docker group across 1 directory with 5 updates Bumps the docker group with 5 updates in the /versions directory: | Package | From | To | | --- | --- | --- | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.95.2` | `3.95.9` | | [anchore/syft](https://github.com/anchore/syft) | `v1.44.0` | `v1.48.0` | | [aquasecurity/trivy](https://github.com/aquasecurity/trivy) | `0.70.0` | `0.72.0` | | [anchore/grype](https://github.com/anchore/grype) | `v0.112.0` | `v0.116.0` | | semgrep/semgrep | `1.161.0` | `1.169.0` | Updates `trufflesecurity/trufflehog` from 3.95.2 to 3.95.9 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.95.2...v3.95.9) Updates `anchore/syft` from v1.44.0 to v1.48.0 - [Release notes](https://github.com/anchore/syft/releases) - [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/syft/compare/v1.44.0...v1.48.0) Updates `aquasecurity/trivy` from 0.70.0 to 0.72.0 - [Release notes](https://github.com/aquasecurity/trivy/releases) - [Changelog](https://github.com/aquasecurity/trivy/blob/main/CHANGELOG.md) - [Commits](https://github.com/aquasecurity/trivy/compare/v0.70.0...v0.72.0) Updates `anchore/grype` from v0.112.0 to v0.116.0 - [Release notes](https://github.com/anchore/grype/releases) - [Changelog](https://github.com/anchore/grype/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/grype/compare/v0.112.0...v0.116.0) Updates `semgrep/semgrep` from 1.161.0 to 1.169.0 --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: docker - dependency-name: anchore/syft dependency-version: v1.48.0 dependency-type: direct:production dependency-group: docker - dependency-name: aquasecurity/trivy dependency-version: 0.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker - dependency-name: anchore/grype dependency-version: v0.116.0 dependency-type: direct:production dependency-group: docker - dependency-name: semgrep/semgrep dependency-version: 1.169.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker ... Signed-off-by: dependabot[bot] --- versions/Dockerfile | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/versions/Dockerfile b/versions/Dockerfile index e59e2b6..840137b 100644 --- a/versions/Dockerfile +++ b/versions/Dockerfile @@ -18,10 +18,10 @@ # to do that (in-place literal-string replace via Python), commit, # push. -FROM ghcr.io/trufflesecurity/trufflehog:3.95.2@sha256:49d1c4fbbc580aac487ac7cb0517bb085826bd352d7578d62bb4c0c6b7205075 AS trufflehog -FROM ghcr.io/anchore/syft:v1.44.0@sha256:86fde6445b483d902fe011dd9f68c4987dd94e07da1e9edc004e3c2422650de6 AS syft -FROM public.ecr.aws/aquasecurity/trivy:0.70.0@sha256:be1190afcb28352bfddc4ddeb71470835d16462af68d310f9f4bca710961a41e AS trivy -FROM ghcr.io/anchore/grype:v0.112.0@sha256:391bfda62888fb4e98ff5c4c81598f7431a3c1eac3f8519d69d1ff00df247c1d AS grype -FROM semgrep/semgrep:1.161.0@sha256:326e5f41cc972bb423b764a14febbb62bbad29ee1c01820805d077dd868fea48 AS semgrep +FROM ghcr.io/trufflesecurity/trufflehog:3.95.9@sha256:59b244249d1a1aef4baa24fe73d3c931616264482580d806d77f6c74d26b3e42 AS trufflehog +FROM ghcr.io/anchore/syft:v1.48.0@sha256:b4f1df79f97b817682d8b5ff941eb6bfe74f6172553a5e312c75bbc2eabc405c AS syft +FROM public.ecr.aws/aquasecurity/trivy:0.72.0@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f AS trivy +FROM ghcr.io/anchore/grype:v0.116.0@sha256:fd4ab4d1042b522c896e73bdf09ab8bf384fa417df99d6dd0d6e1008c7e7c821 AS grype +FROM semgrep/semgrep:1.169.0@sha256:2b33f46ba66cf8cc2ad59ccfa7d22951fd00c632c38f1339e84ec8e6e641a942 AS semgrep FROM rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667 AS actionlint FROM koalaman/shellcheck:v0.11.0@sha256:61862eba1fcf09a484ebcc6feea46f1782532571a34ed51fedf90dd25f925a8d AS shellcheck