(streampipes) branch dev updated: fix: Fix OSV Scanner commit workflow (#3011)

[zehnder]

This is an automated email from the ASF dual-hosted git repository.

zehnder pushed a commit to branch dev
in repository https://gitbox.apache.org/repos/asf/streampipes.git


The following commit(s) were added to refs/heads/dev by this push:
     new 39639b18e0 fix: Fix OSV Scanner commit workflow  (#3011)
39639b18e0 is described below

commit 39639b18e0af1d3305d16952527d08ec13f9b2cd
Author: airwish <ittu...@outlook.com>
AuthorDate: Thu Jul 11 22:42:00 2024 +0800

    fix: Fix OSV Scanner commit workflow  (#3011)
    
    * chore: Add workflow_dispatch trigger to OSV Scanner workflow
    
    * Temporary change reviewers
    
    * fix: Fix OSV Scanner workflow committer message
    
    * Restore changed reviewers
---
 .github/workflows/osv-scanner.yml | 15 +++++++--------
 1 file changed, 7 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/osv-scanner.yml 
b/.github/workflows/osv-scanner.yml
index 223d7f1288..7c1a2e231c 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -16,17 +16,16 @@
 name: OSV Scanner
 
 on:
+  workflow_dispatch:
   schedule:
-    - cron: '0 0 1 * *'
+    - cron: "0 0 1 * *"
 
 jobs:
   run-osv-scanner:
-
     name: Run OSV Scanner
     runs-on: ubuntu-latest
 
     steps:
-
       - name: Checkout
         uses: actions/checkout@v4
 
@@ -35,21 +34,21 @@ jobs:
 
       - name: Scan for vulnerabilities
         run: |
-          echo '<!--\n  ~ Licensed to the Apache Software Foundation (ASF) 
under one or more\n  ~ contributor license agreements.  See the NOTICE file 
distributed with\n  ~ this work for additional information regarding copyright 
ownership.\n  ~ The ASF licenses this file to You under the Apache License, 
Version 2.0\n  ~ (the "License"); you may not use this file except in 
compliance with\n  ~ the License.  You may obtain a copy of the License at\n  
~\n  ~    http://www.apache.org/licens [...]
+          echo -e '<!--\n  ~ Licensed to the Apache Software Foundation (ASF) 
under one or more\n  ~ contributor license agreements.  See the NOTICE file 
distributed with\n  ~ this work for additional information regarding copyright 
ownership.\n  ~ The ASF licenses this file to You under the Apache License, 
Version 2.0\n  ~ (the "License"); you may not use this file except in 
compliance with\n  ~ the License.  You may obtain a copy of the License at\n  
~\n  ~    http://www.apache.org/lic [...]
           docker run --rm -v $PWD:/repo -w /repo ghcr.io/google/osv-scanner 
--format markdown -r . 2>&1 | grep -vE '^((Scanning|Scanned|Failed).*)$' >> 
VULNERABILITY.md
         continue-on-error: true
 
       - name: Create Pull Request
         id: cpr
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          committer: ${{ github.actor }} <nore...@gmail.com>
-          author: ${{ github.actor }} <${{ github.actor }}@github.com>
+          committer: github-actions[bot] 
<41898282+github-actions[bot]@users.noreply.github.com>
+          author: ${{ github.actor }} <${{ github.actor_id }}+${{ github.actor 
}}@users.noreply.github.com>
           signoff: true
           title: Monthly update of vulnerability report
           commit-message: monthly update of vulnerability report
           body: |
             Update *Vulnerablity* report
           delete-branch: true
-          reviewers: 
'dominikriemer,tenthe,svenO3,smlabt,grainier,RobertIndie,bossenti'
+          reviewers: 
"dominikriemer,tenthe,svenO3,smlabt,grainier,RobertIndie,bossenti"