[dependabot]

Bumps the ci group with 1 update: docker/scout-action.

Updates docker/scout-action from 1.27.0 to 1.28.0

Release notes

Sourced from docker/scout-action's releases.

v1.28.0

What's Changed

• Updates the Brotli decoder to 1.2.7 to incorporate security fixes. @​brianru
• Updates HTTP/2 dependencies to incorporate security fixes. @​brianru
• Fixes missing Debian vulnerability findings in Distroless images by correctly identifying their operating system version. @​brianru

Commits

• 4bbf17a [BOT] Update assets for v1.28.0 release (#122)
• 8e5a501 deps: pin Docker actions to repair test workflow startup (#121)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Overview

Image reference	my-sample-workload:latest	my-sample-workload:latest
- digest	448ef486d386	448ef486d386
- tag	latest	latest
- provenance	b143e68	b9c519f
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	56 MB	56 MB
- packages	20	20
Base Image	dotnet:10.0.13-alpine3.24	dotnet:10.0.13-alpine3.24
- vulnerabilities

Policies (0 improved, 0 worsened)

Health score: my-sample-workload:latest B (83%) → my-sample-workload:latest B (83%)

Policy Name	my-sample-workload:latest	my-sample-workload:latest	Change	Standing
Default non-root user	✅	✅		No Change
No copyleft licenses	⚠️ 8	⚠️ 8		No Change
No fixable critical or high vulnerabilities	✅	✅		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	⚠️	⚠️		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change