chore(deps): update docker/build-push-action action from v6.13.0 to v6.14.0 (.github/workflows/release-x-manual-docker-containers.yml)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	minor	v6.13.0 -> v6.14.0

---

Release Notes

docker/build-push-action (docker/build-push-action)

v6.14.0

Compare Source

• Bump @​docker/actions-toolkit from 0.53.0 to 0.55.0 in https://github.com/docker/build-push-action/pull/1324

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The PR upgrades Docker build-push-action from v6.13.0 to v6.14.0 in GitHub Actions workflows while identifying several security concerns including use of 'latest' tag, lack of input validation, disabled build checks, exposed debug information, and pinned action versions.

Expand for full summary

The PR updates two GitHub Actions workflow files, upgrading Docker build-push-action from v6.13.0 to v6.14.0 for DefectDojo Docker container builds. Security findings include:

1. Potential security risk with 'latest' Docker tag in release workflow
2. No explicit input validation for release version input
3. DOCKER_BUILD_CHECKS_ANNOTATIONS set to false, potentially disabling build-time checks
4. Debug flags in buildkitd might expose additional information
5. Workflow uses pinned GitHub Actions versions, which is a security consideration

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved