v2.1.0

What's Changed

• chore(deps): update github/codeql-action action to v3.29.0 by @renovate-bot in #76
• Update to v2.1.0 by @michaelkedar in #81

Full Changelog: v2.0.3...v2.1.0

v2.0.3

Update to use osv-scanner v2.0.3

Notable changes:

• There's now a flag --allow-no-lockfiles you can pass to osv-scanner to avoid getting an error when running against a repo with no lockfiles.
• We no longer ignore general errors when they occur on osv-scanner-action, and will fail the workflow (e.g. invalid flags passed in)

v2.0.2

Update osv-scanner to v2.0.2

v2.0.1

What's Changed

• Update to v2.0.1 by @michaelkedar in #69

Full Changelog: v2.0.0...v2.0.1

v2.0.0

What's Changed

• Updated to support OSV-Scanner V2
• Workflows, add support for matrix strategies by @GeoDerp in #52
• Support checking out submodules by @faern in #57

Breaking changes

By default, osv-scanner-action no longer scans the HEAD git hash. This means if there are no other lockfiles found to scan, then osv-scanner-action will fail the workflow, as it is likely it's setup incorrectly.

To match the previous behavior, pass --include-git-root to scan-args, e.g.

  osv-scan:
    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.0.0"
    with:
      scan-args: |-
        --include-git-root
        --recursive
        ./

Full Changelog: v1.9.2...v2.0.0

v1.9.2

What's Changed

• Update to v1.9.2 by @hogo6002 in #53

Full Changelog: v1.9.1...v1.9.2

v1.9.1

What's Changed

• Update to use osv-scanner v1.9.1
• chore(deps): update workflows by @renovate-bot in #47
• Update to v1.9.1 by @another-rex in #49
• chore(deps): update workflows by @renovate-bot in #48

Full Changelog: v1.9.0...v1.9.1

v1.9.0

What's Changed

• chore(deps): update workflows by @renovate-bot in #40
• chore(deps): update github/codeql-action action to v3.26.7 by @renovate-bot in #43
• chore(deps): update workflows by @renovate-bot in #44
• chore(deps): update github/codeql-action action to v3.26.10 by @renovate-bot in #45
• Update to v1.9.0 by @michaelkedar in #46

New Contributors

• @michaelkedar made their first contribution in #46

Full Changelog: v1.8.5...v1.9.0

v1.8.5

This updates OSV-Scanner to v1.8.5.

What's Changed

• chore(deps): update workflows by @renovate-bot in #34
• fix: Use force checkout on second checkout for PR scanning by @another-rex in #41
• chore: update to v1.8.5 by @cuixq in #42

New Contributors

• @cuixq made their first contribution in #42

Full Changelog: v1.8.4...v1.8.5

v1.8.4

Bump OSV-Scanner version https://github.com/google/osv-scanner/releases/tag/v1.8.4