chore(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 #884

	name: Security

	on:
	push:
	branches:
	- main
	pull_request:

	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	# Schedule in case of no code changes
	schedule:
	- cron: '30 0 1,15 * *'

	permissions: # added using https://github.com/step-security/secure-repo
	contents: read

	jobs:
	trivy:
	name: Trivy scanner
	continue-on-error: true
	runs-on: ubuntu-latest
	permissions:
	contents: read
	security-events: write
	pull-requests: read
	actions: write

	if: (github.actor != 'dependabot[bot]')
	steps:
	-
	uses: step-security/harden-runner@eb238b55efaa70779f274895e782ed17c84f2895
	with:
	disable-sudo: true
	disable-telemetry: true
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	ghcr.io:443
	github.com:443
	pkg-containers.githubusercontent.com:443
	-
	name: Cancel previous workflows
	uses: styfle/cancel-workflow-action@01ce38bf961b4e243a6342cbade0dbc8ba3f0432 # 0.12.0
	with:
	access_token: ${{ secrets.GITHUB_TOKEN }}
	-
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	-
	name: Run Trivy vulnerability scanner in repo mode
	uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca # master
	with:
	scan-type: 'fs'
	ignore-unfixed: true
	format: 'sarif'
	output: 'trivy-results.sarif'
	severity: 'CRITICAL'
	-
	name: Upload Trivy scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2.21.9
	with:
	sarif_file: 'trivy-results.sarif'

Provide feedback