Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• Update registry.access.redhat.com/ubi9/skopeo:latest Docker digest to 7ea7d4c

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update quay.io/redhat-appstudio-tekton-catalog/task-show-sbom:0.1 Docker digest to 9cd4bf0
• Update quay.io/redhat-appstudio-tekton-catalog/task-summary:0.2 Docker digest to 51d5aaa

Detected dependencies

dockerfile

Containerfile

• registry.access.redhat.com/ubi9/ubi-micro latest@sha256:1c8483e0fda0e990175eb9855a5f15e0910d2038dd397d9e2b357630f0321e6d

github-actions

.github/workflows/auto-merge.yaml

.github/workflows/release.yaml

• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• sigstore/cosign-installer v3.5.0@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20
• anchore/sbom-action v0.16.0@e8d2a6937ecead383dfe75190d104edd1f9c5751
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• slsa-framework/slsa-github-generator v2.0.0
• enterprise-contract/action-validate-image v1.0.200

.github/workflows/scorecards.yml

• step-security/harden-runner v2.8.0@f086349bfa2bd1361f7909c78558e816508cdc10
• actions/checkout v4.1.6@a5ac7e51b41094c92402da3b24376905380afc29
• ossf/scorecard-action v2.3.3@dc50aa9510b46c811795eb24b2f1ba02a914e534
• actions/upload-artifact v4.3.3@65462800fd760344b1a7b4382951275a0abb4808
• github/codeql-action v3.25.8@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff

tekton

.tekton/golden-container-pull-request.yaml

• quay.io/redhat-appstudio-tekton-catalog/task-init 0.2@sha256:b23c7a924f303a67b3a00b32a6713ae1a4fccbc5327daa76a6edd250501ea7a3
• quay.io/redhat-appstudio-tekton-catalog/task-git-clone 0.1@sha256:ae1249aa49e82da5f99cc23b256172dce8f7c7951ece68ca0419240c4ecb52e2
• quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies 0.1@sha256:9aec3ae9f0f50a05abdc739faf4cbc82832cff16c77ac74e1d54072a882c0503
• quay.io/redhat-appstudio-tekton-catalog/task-buildah 0.1@sha256:17e2d819edcc3806cc463fc28f29cfa2ebd77ca634ee526e41aa95299a9d2e13
• quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote 0.1@sha256:15f3395b9de2d88e888451a85f577347173cd904cd19a9bbd0750f57b40764e5
• quay.io/redhat-appstudio-tekton-catalog/task-build-image-manifest 0.1@sha256:e064b63b2311d23d6bf6538347cb4eb18c980d61883f48149bc9c728f76b276c
• quay.io/redhat-appstudio-tekton-catalog/task-source-build 0.1@sha256:1a976a35adee9163e455d0c5aee5d9bf9cb3c6a770656ae347558f8c54977709
• quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check 0.4@sha256:3793fbf59e7dadff9d1f7e7ea4cc430c69a2de620b20c7fd69d71bdd5f6c4a60
• quay.io/redhat-appstudio-tekton-catalog/task-clair-scan 0.1@sha256:44d0df70080e082e72d2694b14130ff512e5e7f2611190161a9b016b4df9fb22
• quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check 0.1@sha256:242acc527a06a11fac9dd6524467f62f3a086c186c5f885973e5780a04d4289c
• quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan 0.1@sha256:5dbe6c646c3502ddc7fbe6016b8584bed6ce3ab7028b0c405ebaabc7e6e9e64c
• quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check 0.1@sha256:f9cc253c3a07594bfb51e09c78b46598591cb353e19b16ef514f8312a8b0bada
• quay.io/redhat-appstudio-tekton-catalog/task-show-sbom 0.1@sha256:1f1504c5d8b135864111a993ac6f9ab1212907fa0c609223714cdd7bd825e2ca
• quay.io/redhat-appstudio-tekton-catalog/task-summary 0.2@sha256:c718319bd57c4f0ab1843cf98d813d0a26a73e0c8ce66218079c3c865508b0fb

.tekton/golden-container-push.yaml

• quay.io/redhat-appstudio-tekton-catalog/task-init 0.2@sha256:b23c7a924f303a67b3a00b32a6713ae1a4fccbc5327daa76a6edd250501ea7a3
• quay.io/redhat-appstudio-tekton-catalog/task-git-clone 0.1@sha256:ae1249aa49e82da5f99cc23b256172dce8f7c7951ece68ca0419240c4ecb52e2
• quay.io/redhat-appstudio-tekton-catalog/task-prefetch-dependencies 0.1@sha256:9aec3ae9f0f50a05abdc739faf4cbc82832cff16c77ac74e1d54072a882c0503
• quay.io/redhat-appstudio-tekton-catalog/task-buildah 0.1@sha256:17e2d819edcc3806cc463fc28f29cfa2ebd77ca634ee526e41aa95299a9d2e13
• quay.io/redhat-appstudio-tekton-catalog/task-buildah-remote 0.1@sha256:15f3395b9de2d88e888451a85f577347173cd904cd19a9bbd0750f57b40764e5
• quay.io/redhat-appstudio-tekton-catalog/task-build-image-manifest 0.1@sha256:e064b63b2311d23d6bf6538347cb4eb18c980d61883f48149bc9c728f76b276c
• quay.io/redhat-appstudio-tekton-catalog/task-source-build 0.1@sha256:1a976a35adee9163e455d0c5aee5d9bf9cb3c6a770656ae347558f8c54977709
• quay.io/redhat-appstudio-tekton-catalog/task-deprecated-image-check 0.4@sha256:3793fbf59e7dadff9d1f7e7ea4cc430c69a2de620b20c7fd69d71bdd5f6c4a60
• quay.io/redhat-appstudio-tekton-catalog/task-clair-scan 0.1@sha256:44d0df70080e082e72d2694b14130ff512e5e7f2611190161a9b016b4df9fb22
• quay.io/redhat-appstudio-tekton-catalog/task-sast-snyk-check 0.1@sha256:242acc527a06a11fac9dd6524467f62f3a086c186c5f885973e5780a04d4289c
• quay.io/redhat-appstudio-tekton-catalog/task-clamav-scan 0.1@sha256:5dbe6c646c3502ddc7fbe6016b8584bed6ce3ab7028b0c405ebaabc7e6e9e64c
• quay.io/redhat-appstudio-tekton-catalog/task-sbom-json-check 0.1@sha256:f9cc253c3a07594bfb51e09c78b46598591cb353e19b16ef514f8312a8b0bada
• quay.io/redhat-appstudio-tekton-catalog/task-show-sbom 0.1@sha256:1f1504c5d8b135864111a993ac6f9ab1212907fa0c609223714cdd7bd825e2ca
• quay.io/redhat-appstudio-tekton-catalog/task-summary 0.2@sha256:c718319bd57c4f0ab1843cf98d813d0a26a73e0c8ce66218079c3c865508b0fb

.tekton/golden-container-tag-latest.yaml

• registry.access.redhat.com/ubi9/skopeo latest@sha256:789cfada9b186db8f738e48c79a1646f3b91c3ba0238d2a63dc6fb4f19763673

---

• Check this box to trigger a request for Renovate to run again on this repository

[lcarva]

Jobs can be seen here: https://developer.mend.io/github/enterprise-contract/golden-container