diff --git a/.github/workflows/pr-security-scan.yml b/.github/workflows/pr-security-scan.yml index 7e29d603f..84ffceee0 100644 --- a/.github/workflows/pr-security-scan.yml +++ b/.github/workflows/pr-security-scan.yml @@ -29,7 +29,7 @@ concurrency: jobs: security: name: Security scan - uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@228e62369c5d8b677215f8a112ea0c8e8119c58f # v1.0.6 + uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@f92f9387d10fe91a0293762bdcefd3ba012a827b # v1.0.7 with: report_formats: human bandit_config_path: .github/scan_tools_configs/bandit.yml diff --git a/.github/workflows/weekly-security-scan.yml b/.github/workflows/weekly-security-scan.yml index 41ab7a374..545dc2c20 100644 --- a/.github/workflows/weekly-security-scan.yml +++ b/.github/workflows/weekly-security-scan.yml @@ -29,7 +29,7 @@ jobs: permissions: contents: read security-events: write - uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@228e62369c5d8b677215f8a112ea0c8e8119c58f # v1.0.6 + uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@f92f9387d10fe91a0293762bdcefd3ba012a827b # v1.0.7 with: scan_mode: all report_formats: sarif