Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

• Update dependency checkov to v2.5.20
• Update dependency checkov to v3
• Update sigstore/cosign-installer action to v3
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

• Update docker/metadata-action action to v3.8.0
• Update ghcr.io/kyverno/kyverno-cli Docker tag to v1.8

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• Update actions/checkout action to v3.6.0
• Update alpine/k8s Docker tag to v1.33.3
• Update sigstore/cosign-installer action to v2.8.1
• Update actions/checkout action to v4
• Update docker/build-push-action action to v6
• Update docker/login-action action to v3
• Update docker/metadata-action action to v5
• Update docker/setup-buildx-action action to v3
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

• ghcr.io/kyverno/kyverno-cli 1.7-dev-latest
• alpine/k8s 1.22.6

github-actions

.github/workflows/ci.yml

• actions/checkout v3.0.0
• docker/login-action v1.14.1
• docker/metadata-action v3.7.0
• docker/setup-buildx-action v1
• docker/build-push-action v2.10.0
• docker/login-action v1.14.1
• sigstore/cosign-installer v2.1.0

pip_requirements

requirements.txt

• checkov ==2.0.1037

---

• Check this box to trigger a request for Renovate to run again on this repository