Skip to content

PR for latest Grype release #909

PR for latest Grype release

PR for latest Grype release #909

name: PR for latest Grype release
on:
schedule:
# 7:04 UTC (2:04 am EST)
- cron: "4 7 * * *"
# Allows you to run this workflow manually from the Actions tab
workflow_dispatch:
jobs:
upgrade-grype:
runs-on: ubuntu-latest
if: github.repository == 'anchore/scan-action'
steps:
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Get latest Grype version
id: latest-version
env:
GITHUB_TOKEN: ${{ github.token }}
run: |
LATEST_VERSION=$(gh release view --json name -q '.name' -R anchore/grype)
echo "exports.GRYPE_VERSION = \"$LATEST_VERSION\";" > GrypeVersion.js
# install husky hooks and dependencies:
npm install
npm run build
# export the version for use with create-pull-request:
echo "LATEST_VERSION=$LATEST_VERSION" >> $GITHUB_OUTPUT
- uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
id: generate-token
with:
app_id: ${{ secrets.TOKEN_APP_ID }}
private_key: ${{ secrets.TOKEN_APP_PRIVATE_KEY }}
- uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
with:
signoff: true
delete-branch: true
branch: auto/latest-grype
labels: dependencies
commit-message: "chore(deps): update Grype to ${{ steps.latest-version.outputs.LATEST_VERSION }}"
title: "chore(deps): update Grype to ${{ steps.latest-version.outputs.LATEST_VERSION }}"
body: "Update Grype to ${{ steps.latest-version.outputs.LATEST_VERSION }}"
token: ${{ steps.generate-token.outputs.token }}