Bump google/osv-scanner-action from 2.1.0 to 2.2.3 (#897)

Bumps
[google/osv-scanner-action](https://github.com/google/osv-scanner-action)
from 2.1.0 to 2.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.3</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update workflows by <a
href="https://github.com/renovate-bot"><code>@​renovate-bot</code></a>
in <a
href="https://redirect.github.com/google/osv-scanner-action/pull/86">google/osv-scanner-action#86</a></li>
<li>chore(deps): update workflows to v5 (major) by <a
href="https://github.com/renovate-bot"><code>@​renovate-bot</code></a>
in <a
href="https://redirect.github.com/google/osv-scanner-action/pull/87">google/osv-scanner-action#87</a></li>
<li>Update to v2.2.3 by <a
href="https://github.com/jess-lowe"><code>@​jess-lowe</code></a> in <a
href="https://redirect.github.com/google/osv-scanner-action/pull/101">google/osv-scanner-action#101</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/osv-scanner-action/compare/v2.2.2...v2.2.3">https://github.com/google/osv-scanner-action/compare/v2.2.2...v2.2.3</a></p>
<h2>v2.2.2</h2>
<p>This updates OSV-Scanner to v2.2.2.</p>
<h2>What's Changed</h2>
<ul>
<li>docs: Update Automatic install instructions by <a
href="https://github.com/another-rex"><code>@​another-rex</code></a> in
<a
href="https://redirect.github.com/google/osv-scanner-action/pull/94">google/osv-scanner-action#94</a></li>
<li>Update to v2.2.2 by <a
href="https://github.com/cuixq"><code>@​cuixq</code></a> in <a
href="https://redirect.github.com/google/osv-scanner-action/pull/95">google/osv-scanner-action#95</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/osv-scanner-action/compare/v2.2.1...v2.2.2">https://github.com/google/osv-scanner-action/compare/v2.2.1...v2.2.2</a></p>
<h2>v2.2.1</h2>
<h2>What's Changed</h2>
<p>OSV-Scanner now supports all OSV-Scalibr features behind experimental
flags (<code>--experimental-plugins</code>, see details <a
href="https://google.github.io/osv-scanner/experimental/manual-plugin-selection/">here</a>)!</p>
<h3>Features:</h3>
<ul>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2146">#2146</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2146">google/osv-scanner#2146</a>)
Allow manual OSV-Scalibr plugin selection.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2144">#2144</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2144">google/osv-scanner#2144</a>)
Add OSV-Scalibr version to osv-scanner --version output.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2021">#2021</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2021">google/osv-scanner#2021</a>)
Add experimental support for running OSV-Scalibr detectors.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2079">#2079</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2079">google/osv-scanner#2079</a>)
Fall back to offline extractor if the transitive one fails, so at least
direct dependencies are returned.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2032">#2032</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2032">google/osv-scanner#2032</a>)
Add summary section at the top of outputs and a 'Fixed Version'
column.</li>
<li>[Feature <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2076">#2076</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2076">google/osv-scanner#2076</a>)
Support Ubuntu severity type.</li>
</ul>
<h3>Fixes:</h3>
<ul>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2141">#2141</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2141">google/osv-scanner#2141</a>)
Fix OSV-Scanner json scans not matching with correct ecosystem.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2084">#2084</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2084">google/osv-scanner#2084</a>)
Show absolute paths when scanning containers.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2126">#2126</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2126">google/osv-scanner#2126</a>)
Log and preserve package count before continuing on db error.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2095">#2095</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2095">google/osv-scanner#2095</a>)
Pass through plugin capabilities correctly.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2051">#2051</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2051">google/osv-scanner#2051</a>)
Properly flag if running on Linux or Mac OSs for plugin
compatibility.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2072">#2072</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2072">google/osv-scanner#2072</a>)
Add missing &quot;text&quot; property in description fields.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2068">#2068</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2068">google/osv-scanner#2068</a>)
Change links in output to go to the specific vulnerability page instead
of the list page.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2064">#2064</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2064">google/osv-scanner#2064</a>)
Fix SARIF v3 output to include results.</li>
<li>[Bug <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2151">#2151</a>](<a
href="https://redirect.github.com/google/osv-scanner/issues/2151">google/osv-scanner#2151</a>)
Filter by ecosystem before querying.</li>
</ul>
<h3>API Changes:</h3>
<ul>
<li>[API Change <a
href="https://redirect.github.com/google/osv-scanner-action/issues/2096">#2096</a>](<a
href="https://redirect.github.com/google/osv-scanner/pull/2096">google/osv-scanner#2096</a>)
Allow log handler to be overridden.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/osv-scanner-action/commit/e92b5d07338d4f0ba0981dffed17c48976ca4730"><code>e92b5d0</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/101">#101</a>
from google/update-to-v2.2.3</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/c1fee261a5521af3ccb889041d0fd5628e782f36"><code>c1fee26</code></a>
Update unified workflow example to point to v2.2.3 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/e16154965f9006f67889ca978f5bba09f51dc0fc"><code>e161549</code></a>
Update reusable workflows to point to v2.2.3 actions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/b930bc956e1d83bea419e0f159e1575c2c2ea401"><code>b930bc9</code></a>
&quot;Update actions to use v2.2.3 osv-scanner image&quot;</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/c0e8a1142dcb3ae443d26c8f6a2b774db9f6c6ea"><code>c0e8a11</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/87">#87</a>
from renovate-bot/renovate/major-workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/f317cb8d04fe3bc20978a869d2cd88bd47cfe375"><code>f317cb8</code></a>
chore(deps): update workflows to v5</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/9e22416cb47554b24a5cc2bdc959b7745bc482bf"><code>9e22416</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/86">#86</a>
from renovate-bot/renovate/workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/90b209d0ea55cea1da9fc0c4e65782cc6acb6e2e"><code>90b209d</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/95">#95</a>
from google/update-to-v2.2.2</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/4971fe857574947ed156aac249b0ef89a08473be"><code>4971fe8</code></a>
Update unified workflow example to point to v2.2.2 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/9d4732e8b9db0915df9608123133640b58bb6750"><code>9d4732e</code></a>
Update reusable workflows to point to v2.2.2 actions</li>
<li>Additional commits viewable in <a
href="https://github.com/google/osv-scanner-action/compare/b00f71e051ddddc6e46a193c31c8c0bf283bf9e6...e92b5d07338d4f0ba0981dffed17c48976ca4730">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google/osv-scanner-action&package-manager=github_actions&previous-version=2.1.0&new-version=2.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Hucka <mhucka@google.com>

Author: dependabot[bot]

.github/workflows/osv-scanner.yaml

@@ -78,7 +78,7 @@ jobs:
 
       - name: Run OSV scanner on existing code
         # yamllint disable rule:line-length
-        uses: google/osv-scanner-action/osv-scanner-action@b00f71e051ddddc6e46a193c31c8c0bf283bf9e6 # v2.1.0
+        uses: google/osv-scanner-action/osv-scanner-action@e92b5d07338d4f0ba0981dffed17c48976ca4730 # v2.2.3
         continue-on-error: true
         with:
           scan-args: |-
@@ -96,7 +96,7 @@ jobs:
 
       - name: Run OSV scanner on new code
         # yamllint disable rule:line-length
-        uses: google/osv-scanner-action/osv-scanner-action@b00f71e051ddddc6e46a193c31c8c0bf283bf9e6 # v2.1.0
+        uses: google/osv-scanner-action/osv-scanner-action@e92b5d07338d4f0ba0981dffed17c48976ca4730 # v2.2.3
         continue-on-error: true
         with:
           scan-args: |-
@@ -108,7 +108,7 @@ jobs:
 
       - name: Run the OSV scanner reporter for the job summary page
         # yamllint disable rule:line-length
-        uses: google/osv-scanner-action/osv-reporter-action@b00f71e051ddddc6e46a193c31c8c0bf283bf9e6 # v2.1.0
+        uses: google/osv-scanner-action/osv-reporter-action@e92b5d07338d4f0ba0981dffed17c48976ca4730 # v2.2.3
         with:
           scan-args: |-
             --output=markdown:output.md
@@ -121,7 +121,7 @@ jobs:
 
       - name: Run the OSV scanner reporter for the code-scanning dashboard
         # yamllint disable rule:line-length
-        uses: google/osv-scanner-action/osv-reporter-action@b00f71e051ddddc6e46a193c31c8c0bf283bf9e6 # v2.1.0
+        uses: google/osv-scanner-action/osv-reporter-action@e92b5d07338d4f0ba0981dffed17c48976ca4730 # v2.2.3
         with:
           scan-args: |-
             --output=osv-results.sarif