From 0d80cbc7bfd7b0f783181114116180409e545707 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 20:45:31 +0000 Subject: [PATCH] chore(deps): bump ROCm/rocm-security-gh/.github/workflows/security-baseline.yml Bumps the github-actions group with 1 update in the / directory: [ROCm/rocm-security-gh/.github/workflows/security-baseline.yml](https://github.com/rocm/rocm-security-gh). Updates `ROCm/rocm-security-gh/.github/workflows/security-baseline.yml` from 1.0.6 to 1.0.7 - [Commits](https://github.com/rocm/rocm-security-gh/compare/228e62369c5d8b677215f8a112ea0c8e8119c58f...f92f9387d10fe91a0293762bdcefd3ba012a827b) --- updated-dependencies: - dependency-name: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml dependency-version: 1.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/pr-security-scan.yml | 2 +- .github/workflows/weekly-security-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pr-security-scan.yml b/.github/workflows/pr-security-scan.yml index 7e29d603f..84ffceee0 100644 --- a/.github/workflows/pr-security-scan.yml +++ b/.github/workflows/pr-security-scan.yml @@ -29,7 +29,7 @@ concurrency: jobs: security: name: Security scan - uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@228e62369c5d8b677215f8a112ea0c8e8119c58f # v1.0.6 + uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@f92f9387d10fe91a0293762bdcefd3ba012a827b # v1.0.7 with: report_formats: human bandit_config_path: .github/scan_tools_configs/bandit.yml diff --git a/.github/workflows/weekly-security-scan.yml b/.github/workflows/weekly-security-scan.yml index 41ab7a374..545dc2c20 100644 --- a/.github/workflows/weekly-security-scan.yml +++ b/.github/workflows/weekly-security-scan.yml @@ -29,7 +29,7 @@ jobs: permissions: contents: read security-events: write - uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@228e62369c5d8b677215f8a112ea0c8e8119c58f # v1.0.6 + uses: ROCm/rocm-security-gh/.github/workflows/security-baseline.yml@f92f9387d10fe91a0293762bdcefd3ba012a827b # v1.0.7 with: scan_mode: all report_formats: sarif