Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

This repository currently has no open or pending branches.

Detected dependencies

dockerfile

Containerfile

• registry.access.redhat.com/ubi9/ubi-micro latest@sha256:becdf7fff4509ee81df982000d0adef858a7ae7995dfb7d774b9ded6a461ebad

github-actions

.github/workflows/auto-merge.yaml

.github/workflows/release.yaml

• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• sigstore/cosign-installer v3.7.0@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da
• anchore/sbom-action v0.17.9@df80a981bc6edbc4e220a492d3cbe9f5547a6e75
• redhat-actions/podman-login v1@4934294ad0449894bcd1e9f191899d7292469603
• redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056
• redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c
• slsa-framework/slsa-github-generator v2.0.0
• enterprise-contract/action-validate-image v1.0.341

.github/workflows/scorecards.yml

• step-security/harden-runner v2.10.2@0080882f6c36860b6ba35c610c98ce87d4e2f26f
• actions/checkout v4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683
• ossf/scorecard-action v2.4.0@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
• actions/upload-artifact v4.5.0@6f51ac03b9356f520e9adb1b1b7802705f340c2b
• github/codeql-action v3.28.0@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169

tekton

.tekton/build-pipeline.yaml

• quay.io/konflux-ci/tekton-catalog/task-init 0.2@sha256:90dda596d44b3f861889da2fba161dff34c6116fe76c3989e3f84262ea0f29cd
• quay.io/konflux-ci/tekton-catalog/task-git-clone 0.1@sha256:d091a9e19567a4cbdc5acd57903c71ba71dc51d749a4ba7477e689608851e981
• quay.io/konflux-ci/tekton-catalog/task-prefetch-dependencies 0.1@sha256:6ac6c3eb069a2e9447d4862dee4f3d8abd11dcf0ebf56c11babaeeb6693f5484
• quay.io/konflux-ci/tekton-catalog/task-buildah 0.2@sha256:c3fb20564f297f8a5590db73f45910b1e6ec674dd4ef644779f95b60feca3e8b
• quay.io/konflux-ci/tekton-catalog/task-buildah-remote 0.2@sha256:23bfa0eb3a3afaaaa5e7e2b66c67b01ff81c42f5922858005d8b7e19dc9f5725
• quay.io/konflux-ci/tekton-catalog/task-build-image-manifest 0.1@sha256:db41e6bf0917f4d4be64d21eef2385dc329d18e93bcc834745e6342f87febc81
• quay.io/konflux-ci/tekton-catalog/task-source-build 0.1@sha256:6c8393cf1d54592fa2ae12a022ed199a3e2914f64c26c02a17266cb51fc90e07
• quay.io/konflux-ci/tekton-catalog/task-deprecated-image-check 0.4@sha256:f8efb0b22692fad908a1a75f8d5c0b6ed3b0bcd2a9853577e7be275e5bac1bb8
• quay.io/konflux-ci/tekton-catalog/task-rpms-signature-scan 0.2@sha256:9e33cbc0128aa1a34d6996c87fceac03a6aa05d1c18564a73abbb9b6a710fd6a
• quay.io/konflux-ci/tekton-catalog/task-clair-scan 0.2@sha256:e428b37d253621365ffb24d4053e5f3141988ae6a30fce1c8ba73b7211396eb0
• quay.io/konflux-ci/tekton-catalog/task-sast-snyk-check 0.3@sha256:df33774c66799947d012605febdc75e82498413ecc6e374774c648006b816cd1
• quay.io/konflux-ci/tekton-catalog/task-clamav-scan 0.2@sha256:d78221853f7ff2befc6669dd0eeb91e6611ae84ac7754150ea0f071d92ff41cb
• quay.io/konflux-ci/tekton-catalog/task-verify-signed-rpms 0.1@sha256:f20cb69f1bc97daaac31ea6ee5efd0fccbeb5ed5dc3575512478fea74bd16376
• quay.io/konflux-ci/tekton-catalog/task-show-sbom 0.1@sha256:945a7c9066d3e0a95d3fddb7e8a6992e4d632a2a75d8f3a9bd2ff2fef0ec9aa0
• quay.io/konflux-ci/tekton-catalog/task-summary 0.2@sha256:870d9a04d9784840a90b7bf6817cd0d0c4edfcda04b1ba1868cae625a3c3bfcc

.tekton/golden-container-pull-request.yaml

.tekton/golden-container-push.yaml

---

• Check this box to trigger a request for Renovate to run again on this repository

[lcarva]

Jobs can be seen here: https://developer.mend.io/github/enterprise-contract/golden-container