Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 29, 2025

Bumps checkmarx/kics-github-action from 2.1.9 to 2.1.12.

Release notes

Sourced from checkmarx/kics-github-action's releases.

v2.1.12

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.11...v2.1.12

v2.1.11

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.10...v2.1.11

v2.1.10

What's Changed

New Contributors

Full Changelog: Checkmarx/kics-github-action@v2.1.9...v2.1.10

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action) from 2.1.9 to 2.1.12.
- [Release notes](https://github.com/checkmarx/kics-github-action/releases)
- [Commits](Checkmarx/kics-github-action@v2.1.9...v2.1.12)

---
updated-dependencies:
- dependency-name: checkmarx/kics-github-action
  dependency-version: 2.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2025
@dependabot dependabot bot requested a review from CalinL as a code owner July 29, 2025 10:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2025
Copy link

github-actions bot commented Jul 29, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 8509899.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/checkmarx/kics-github-action 2.1.12 UnknownUnknown

Scanned Files

  • .github/workflows/IACS-Checkmarx-kics.yml

@@ -31,7 +31,7 @@
run: mkdir -p results-dir

- name: Run kics Scan
uses: checkmarx/kics-github-action@v2.1.9
uses: checkmarx/kics-github-action@v2.1.12

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'IaC Scanning with Checkmarx KICS' step
Uses Step
uses 'checkmarx/kics-github-action' with ref 'v2.1.12', not a pinned commit hash
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 13, 2025

Superseded by #95.

@dependabot dependabot bot closed this Aug 13, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/checkmarx/kics-github-action-2.1.12 branch August 13, 2025 10:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants