From 62b2cac7ed8198b15735ed49ab1e5cf35480ba46 Mon Sep 17 00:00:00 2001
From: Spencer Schrock <sschrock@google.com>
Date: Fri, 26 Jul 2024 09:36:21 -0700
Subject: [PATCH] bump docker tag to v2.4.0 for release (#1414)

The main change is the Scorecard bump to v5.0.0, which includes
maintainer annotations which will affect the SARIF produced by this
action.

For full details see the release notes:
https://github.com/ossf/scorecard/releases/tag/v5.0.0

Signed-off-by: Spencer Schrock <sschrock@google.com>
---
 action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/action.yaml b/action.yaml
index 35b2c060..d367438f 100644
--- a/action.yaml
+++ b/action.yaml
@@ -53,4 +53,4 @@ branding:
 
 runs:
   using: "docker"
-  image: "docker://gcr.io/openssf/scorecard-action:v2.3.3"
+  image: "docker://gcr.io/openssf/scorecard-action:v2.4.0"