diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index f8c4b6278..cb3a50e83 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -244,7 +244,7 @@ jobs: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && steps.dependency-changes.outputs.snapshot_detector != '' }} - uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6 + uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0 with: snapshot-sha: ${{ github.event.pull_request.base.sha }} snapshot-ref: ${{ format('refs/heads/{0}', github.event.pull_request.base.ref) }} @@ -257,7 +257,7 @@ jobs: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && steps.dependency-changes.outputs.snapshot_detector != '' }} - uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6 + uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0 with: snapshot-sha: ${{ github.event.pull_request.head.sha }} snapshot-ref: ${{ format('refs/heads/{0}', github.event.pull_request.head.ref) }} @@ -275,7 +275,7 @@ jobs: # timeout component-detection falls back to declared source dependencies. env: PipReportFileLevelTimeoutSeconds: "120" - uses: advanced-security/component-detection-dependency-submission-action@b282c67b1008fde9b60da4bdfcd8849613e293b2 # v0.1.6 + uses: advanced-security/component-detection-dependency-submission-action@a02aeda7a175ad4dd38a13c4d3ff2df9da8f2cf0 # v0.2.0 with: snapshot-sha: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }} snapshot-ref: ${{ github.event_name == 'pull_request' && format('refs/heads/{0}', github.event.pull_request.head.ref) || github.ref }}