Skip to content

chore(deps): bump docker/scout-action from 1.9.3 to 1.24.0 - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/docker/scout-action-1.24.0
Open

chore(deps): bump docker/scout-action from 1.9.3 to 1.24.0#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/docker/scout-action-1.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps docker/scout-action from 1.9.3 to 1.24.0.

Release notes

Sourced from docker/scout-action's releases.

v1.24.0

What's Changed

  • Adds local Scout Health Scores to docker scout policy, quickview, and compare. @​cdupuis
  • Fixes docker scout cves --only-base and --ignore-base to correctly classify packages from provenance-identified base images. @​andrestylianos
  • Updates dependencies, including ORAS, Sigstore, OpenTelemetry, go-git, and pgx.

v1.23.1

What's Changed

  • Fixes policy evaluation when using custom Rego policies without details metadata @​whostolebenfrog

v1.23.0

What's Changed

  • Prevents empty VEX documents from breaking scanning @​flyingmachine
  • Rego policy sources can be served via http(s) through --policy-file @​cdupuis
  • Performance improvements on SBOM fetching and policies evaluation @​cdupuis

v1.22.0

What's Changed

  • Proxies Trivy's Java DB download through Docker Desktop's HTTP proxy transport @​AndreSilva1993

v1.21.0

What's Changed

  • Fix local DHI-derived image handling, including inherited VEX and quickview base-image display
  • Improve SBOM package qualifier handling, including DHI distro qualifiers
  • Update dependencies and Go toolchain

v1.20.4

What's Changed

v1.20.3

What's Changed

v1.20.2

What's Changed

... (truncated)

Commits
  • 7c6b6c3 Merge pull request #111 from docker/release/v1.24.0
  • 5f152f0 [BOT] Update assets for v1.24.0 release
  • 2688993 Merge pull request #109 from docker/release/v1.23.1
  • 7b86e1c [BOT] Update assets for v1.23.1 release
  • ce97ec1 Merge pull request #108 from docker/release/v1.23.0
  • 2da9adb [BOT] Update assets for v1.23.0 release
  • 7520205 Merge pull request #107 from docker/release/v1.22.0
  • 6b2b3b1 [BOT] Update assets for v1.22.0 release
  • 3a14fc8 chore: pin GitHub Actions to commit SHA (#103)
  • cd72f26 Merge pull request #104 from docker/release/v1.21.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [docker/scout-action](https://github.com/docker/scout-action) from 1.9.3 to 1.24.0.
- [Release notes](https://github.com/docker/scout-action/releases)
- [Commits](docker/scout-action@5dae9c7...7c6b6c3)

---
updated-dependencies:
- dependency-name: docker/scout-action
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency version updates and security patches label Aug 27, 2026
@codspeed-hq

codspeed-hq Bot commented Aug 27, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 17 untouched benchmarks


Comparing dependabot/github_actions/docker/scout-action-1.24.0 (1c8e879) with main (d51231e)

Open in CodSpeed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency version updates and security patches

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants