[deps]: Update anchore/scan-action action to v6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
anchore/scan-action	action	major	v5.2.0 -> v6.1.0	v6.2.0

---

Release Notes

anchore/scan-action (anchore/scan-action)

v6.1.0

Compare Source

New in scan-action v6.1.0

• Feature (deps): update Grype to v0.87.0 (#​430)
  • See Grype changes for new updates

v6.0.0

Compare Source

New in scan-action v6.0.0

Breaking Change

• feat: add output-file option, default to random directory output in temp (#​346) [kzantow]

The action no longer generates files in your working directory by default, instead you should use the action outputs: ${{ steps.<id>.outputs.sarif }} where the <id> needs to match the id you configured to reference the scan-action, e.g.:

      - uses: anchore/scan-action@v6
        id: scan
        ...
      - uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: ${{ steps.scan.outputs.sarif }}

Other Changes

• chore(deps): update Grype to v0.86.1 (#​416) [anchore-actions-token-generator]
• feat: add support for cyclonedx and cyclonedx-json output-formats (#​396) [ps-e]
• chore(deps): bump @​actions/cache from 3.3.0 to 4.0.0 (#​412) [dependabot]
• chore(deps): update Grype to v0.86.0 (#​413) [anchore-actions-token-generator]

v5.3.0

Compare Source

New in scan-action v5.3.0

• chore(deps): update Grype to v0.85.0 (#​408) [anchore-actions-token-generator]
• chore(deps-dev): bump @​vercel/ncc from 0.38.2 to 0.38.3 (#​406) [dependabot]
• chore(deps-dev): bump eslint from 9.14.0 to 9.15.0 (#​405) [dependabot]
• chore(deps-dev): bump husky from 9.1.6 to 9.1.7 (#​407) [dependabot]

v5.2.1

Compare Source

New in scan-action v5.2.1

• update Grype to v0.84.0 (#​404) [anchore-actions-token-generator]
• bump @​actions/cache from 3.2.4 to 3.3.0 (#​402) [dependabot]

---

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bitwarden-bot]

Internal tracking:

• ID: PM-16344
• Link: https://bitwarden.atlassian.net/browse/PM-16344

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 10.17%. Comparing base (225e6cf) to head (421e906).
Report is 6 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1198   +/-   ##
=======================================
  Coverage   10.17%   10.17%           
=======================================
  Files          19       19           
  Lines        1101     1101           
=======================================
  Hits          112      112           
  Misses        989      989           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

Checkmarx One – Scan Summary & Details – b37de41d-fffc-4b81-ae72-752d5e3af4fc

No New Or Fixed Issues Found

[addisonbeck]

CI is being super weird on this, but it is not related. Something is wrong with the execution order of jobs, and it appears also with the global linter job.