|
77 | 77 | uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0 |
78 | 78 |
|
79 | 79 | - name: Set up Cosign |
80 | | - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 |
| 80 | + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 |
81 | 81 | if: ${{ inputs.publish }} |
82 | 82 |
|
83 | 83 | - name: Set image name |
@@ -112,7 +112,7 @@ jobs: |
112 | 112 |
|
113 | 113 | - name: Build and push image |
114 | 114 | id: build |
115 | | - uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0 |
| 115 | + uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0 |
116 | 116 | with: |
117 | 117 | context: . |
118 | 118 | platforms: linux/amd64,linux/arm64 |
@@ -206,14 +206,14 @@ jobs: |
206 | 206 | output: trivy-results.sarif |
207 | 207 |
|
208 | 208 | - name: Upload Trivy scan results as artifact |
209 | | - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 |
| 209 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
210 | 210 | with: |
211 | 211 | name: "[${{ github.job }}] Trivy scan results" |
212 | 212 | path: trivy-results.sarif |
213 | 213 | retention-days: 5 |
214 | 214 |
|
215 | 215 | - name: Upload Trivy scan results to GitHub Security tab |
216 | | - uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 |
| 216 | + uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16 |
217 | 217 | with: |
218 | 218 | sarif_file: trivy-results.sarif |
219 | 219 |
|
@@ -242,7 +242,7 @@ jobs: |
242 | 242 | version: v3.13.3 |
243 | 243 |
|
244 | 244 | - name: Set up Cosign |
245 | | - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 |
| 245 | + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 |
246 | 246 | if: inputs.publish && inputs.release |
247 | 247 |
|
248 | 248 | - name: Set chart name |
@@ -278,7 +278,7 @@ jobs: |
278 | 278 | echo "package=${{ steps.chart-name.outputs.value }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT" |
279 | 279 |
|
280 | 280 | - name: Upload chart as artifact |
281 | | - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 |
| 281 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
282 | 282 | with: |
283 | 283 | name: "[${{ github.job }}] Helm chart" |
284 | 284 | path: ${{ steps.build.outputs.package }} |
@@ -362,14 +362,14 @@ jobs: |
362 | 362 | output: trivy-results.sarif |
363 | 363 |
|
364 | 364 | - name: Upload Trivy scan results as artifact |
365 | | - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 |
| 365 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
366 | 366 | with: |
367 | 367 | name: "[${{ github.job }}] Trivy scan results" |
368 | 368 | path: trivy-results.sarif |
369 | 369 | retention-days: 5 |
370 | 370 |
|
371 | 371 | - name: Upload Trivy scan results to GitHub Security tab |
372 | | - uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 |
| 372 | + uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16 |
373 | 373 | with: |
374 | 374 | sarif_file: trivy-results.sarif |
375 | 375 |
|
@@ -403,7 +403,7 @@ jobs: |
403 | 403 | version: v3.13.3 |
404 | 404 |
|
405 | 405 | - name: Set up Cosign |
406 | | - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1 |
| 406 | + uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2 |
407 | 407 | if: inputs.publish && inputs.release |
408 | 408 |
|
409 | 409 | - name: Set chart name |
@@ -436,7 +436,7 @@ jobs: |
436 | 436 | echo "package=${{ github.workspace }}/${{ env.subchartName }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT" |
437 | 437 |
|
438 | 438 | - name: Upload chart as artifact |
439 | | - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 |
| 439 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
440 | 440 | with: |
441 | 441 | name: "[${{ github.job }}] Helm chart" |
442 | 442 | path: ${{ steps.build.outputs.package }} |
@@ -486,13 +486,13 @@ jobs: |
486 | 486 | output: trivy-results.sarif |
487 | 487 |
|
488 | 488 | - name: Upload Trivy scan results as artifact |
489 | | - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 |
| 489 | + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 |
490 | 490 | with: |
491 | 491 | name: "[${{ github.job }}] Trivy scan results" |
492 | 492 | path: trivy-results.sarif |
493 | 493 | retention-days: 5 |
494 | 494 |
|
495 | 495 | - name: Upload Trivy scan results to GitHub Security tab |
496 | | - uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 |
| 496 | + uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16 |
497 | 497 | with: |
498 | 498 | sarif_file: trivy-results.sarif |
0 commit comments