chore: pin osv-scanner

The `ghcr.io/google/osv-scanner:latest` docker image was updated to `v2.0.0-beta1`. This breaks the build with the error: `Failed to parse SBOM "/bom.json" with error: could not determine extractor suitable to this file` This commit pins the image tag to last working release `v1.9.2` Signed-off-by: Andrew Coleman <[email protected]>
substrait-io · Jan 31, 2025 · 44c0e2a · 44c0e2a
1 parent a0ef1dd
commit 44c0e2a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
@@ -69,7 +69,7 @@ jobs:
         with:
           name: cyclonedx-sbom
       - name: Scan
-        run: docker run --rm -v "${PWD}/${{ matrix.project }}/build/reports/bom.json:/bom.json" ghcr.io/google/osv-scanner --sbom /bom.json
+        run: docker run --rm -v "${PWD}/${{ matrix.project }}/build/reports/bom.json:/bom.json" ghcr.io/google/osv-scanner:v1.9.2 --sbom /bom.json
   java:
     name: Build and Test Java
     runs-on: ubuntu-latest

diff --git a/isthmus-cli/build.gradle.kts b/isthmus-cli/build.gradle.kts
@@ -133,7 +133,7 @@ graal {
   option("-H:IncludeResources=.*yaml")
   option("--report-unsupported-elements-at-runtime")
   option("-H:+ReportExceptionStackTraces")
-  option("-H:DynamicProxyConfigurationFiles=proxies.json")
+  option("-H:DynamicProxyConfigurationFiles=isthmus-cli/proxies.json")
   option("--features=io.substrait.isthmus.cli.RegisterAtRuntime")
   option("-J--enable-preview")
 }