github.com/anchore/syft@v1.38.2/syft/pkg/cataloger/githubactions/test-fixtures/workflow-with-version-comments.yaml (about)

     1  name: "Validations"
     2  
     3  on:
     4    workflow_dispatch:
     5    pull_request:
     6    push:
     7      branches:
     8        - main
     9  
    10  permissions:
    11    contents: read
    12  
    13  jobs:
    14  
    15    call-workflow-1-in-local-repo:
    16      uses: octo-org/this-repo/.github/workflows/workflow-1.yml@172239021f7ba04fe7327647b213799853a9eb89  #v1.0.0
    17  
    18    Static-Analysis:
    19      name: "Static analysis"
    20      runs-on: ubuntu-24.04
    21      steps:
    22        - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
    23  
    24        - name: Bootstrap environment
    25          uses: ./.github/actions/bootstrap
    26  
    27        - name: Run static analysis
    28          run: make static-analysis