Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/grafana/security-github-actions).

## Repository problems

These problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/grafana/security-github-actions).

- WARN: Package lookup failures

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] chore(deps): update actions/github-script action to v8

## Edited/Blocked

The following updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox below.

- [ ] chore(deps): update actions/checkout digest
- [ ] chore(deps): update snyk/actions digest to e222141

---

> [!WARNING]
> Renovate failed to look up the following dependencies: `Could not determine new digest for update (github-tags package actions/checkout)`.
>
> Files affected: `trivy/action.yml`

---

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [chore(deps): update grafana/shared-workflows digest to 052ae53](../pull/60)
- [ ] [chore(deps): update actions/checkout action to v4.3.0](../pull/56)
- [ ] [chore(deps): update aquasecurity/trivy-action action to v0.33.1](../pull/53)
- [ ] [chore(deps): update astral-sh/setup-uv action to v6.7.0](../pull/54)
- [ ] [chore(deps): update dependabot/fetch-metadata action to v1.7.0](../pull/57)
- [ ] [chore(deps): update actions/checkout action to v5](../pull/58)
- [ ] [chore(deps): update dependabot/fetch-metadata action to v2](../pull/59)
- [ ] [chore(deps): update tibdex/github-app-token action to v2](../pull/61)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## Detected dependencies

github-actions

.github/workflows/dependabot-automerge.yaml

- `tibdex/github-app-token v1@32691ba7c9e7063bd457bd8f2a5703138591fa58`
- `dependabot/fetch-metadata v1.5.1@cd6e996708b8cfe0b639401134a3b9a3177be7b2`

.github/workflows/periodic-zizmor.yaml

- `actions/checkout v4`
- `actions/create-github-app-token v2`
- `actions/checkout v4`
- `astral-sh/setup-uv v6.0.1@6b9c6063abd6010835644d4c2e1bef4cf5cd0fca`
- `actions/github-script v7`

.github/workflows/self-zizmor.yaml

- `actions/checkout v4@11bd71901bbe5b1630ceea73d27597364c9af683`
- `grafana/shared-workflows 7c748d77ca1ccc01af4281ea72c7ec9d2b3d9129`

.github/workflows/snyk_monitor.yml

- `actions/checkout v3@8e5e7e5ab8b370d6c329ec480221332ada57f0ab`
- `snyk/actions 4a528b5c534bb771b6e3772656a8e0e9dc902f8b`

trivy/action.yml

- `actions/checkout 4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683`
- `actions/checkout 4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683`
- `aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0`
- `actions/checkout 4.2.2@11bd71901bbe5b1630ceea73d27597364c9af683`
- `aquasecurity/trivy-action 0.29.0@18f2510ee396bbf400402947b394f2dd8c87dbb0`

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository