Skip to content

Commit 3c13354

Browse files
balaakasambalaakasam
authored
Merge branch 'master' into feat/iam-role-without-permission-boundary
2 parents 0104610 + 4d63f51 commit 3c13354

21 files changed

Lines changed: 53 additions & 53 deletions

‎.github/workflows/alert-update-terraform-modules.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
-c assets/libraries/common.json \
2929
-u https://registry.terraform.io/v1/modules
3030
- name: Create Pull Request
31-
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v6
31+
uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1
3232
with:
3333
title: "feat(queries): update terraform registry data on commons.json"
3434
token: ${{ secrets.KICS_BOT_PAT }}

‎.github/workflows/check-apache-license.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
fi
3737
- name: Delete comment if license is fixed
3838
if: env.TAG_EXISTS == 'true'
39-
uses: thollander/actions-comment-pull-request@e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa
39+
uses: step-security/actions-comment-pull-request@60cd38988a354b2d22b47612fb02a20e822d6048 # v3.0.2
4040
with:
4141
message: |
4242
Deleting comment...
@@ -45,7 +45,7 @@ jobs:
4545
github-token: ${{ secrets.KICS_BOT_PAT }}
4646
- name: Add comment if no license
4747
if: env.CHECK_FAILED == 'true'
48-
uses: thollander/actions-comment-pull-request@e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa
48+
uses: step-security/actions-comment-pull-request@60cd38988a354b2d22b47612fb02a20e822d6048 # v3.0.2
4949
with:
5050
file-path: .github/scripts/pr-issue-info/apache-check.md
5151
comment-tag: apache_license

‎.github/workflows/go-ci-integration.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
runs-on: cx-public-ubuntu-x64
1717
steps:
1818
- id: skip_check
19-
uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
19+
uses: step-security/skip-duplicate-actions@4eef6ae57f2ca5ea100e5c1da2ead9138483f53c # v5.3.4
2020
with:
2121
cancel_others: false
2222
paths_ignore: '["docs/**", "**/**.md", "examples"]'
@@ -26,7 +26,7 @@ jobs:
2626
persist-credentials: false
2727
- name: Set up Docker Buildx
2828
id: buildx
29-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
29+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
3030
- name: Cache Docker layers
3131
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
3232
with:
@@ -38,7 +38,7 @@ jobs:
3838
run: echo "GITHUB_SHA_SHORT=$(echo $GITHUB_SHA | cut -c 1-8)" >> $GITHUB_ENV
3939
- name: Build
4040
id: docker_build
41-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
41+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
4242
with:
4343
load: true
4444
context: ./

‎.github/workflows/go-ci.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
go-version-file: go.mod
1717
cache: false
1818
- name: golangci-lint
19-
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
19+
uses: step-security/golangci-lint-action@1797facf9ea427614d729a4e9cab0fae1a7852d9 # v9.2.0
2020
with:
2121
version: v2.9.0
2222
args: -c .golangci.yml --timeout 20m
@@ -100,7 +100,7 @@ jobs:
100100
persist-credentials: false
101101
fetch-depth: 0
102102
- name: Detect changed query.rego files
103-
uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
103+
uses: step-security/paths-filter@5c5241b8233e77b55b9046daf88f1cb7560281de # v4.0.1
104104
id: filter
105105
with:
106106
list-files: json

‎.github/workflows/go-e2e-debian.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ jobs:
5656
working-directory: .github/scripts/server-mock
5757
- name: Set up Docker Buildx
5858
id: buildx
59-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
59+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
6060
- name: Cache Docker layers
6161
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
6262
with:
@@ -72,7 +72,7 @@ jobs:
7272
run: echo "GITHUB_SHA_SHORT=$(echo $GITHUB_SHA | cut -c 1-8)" >> $GITHUB_ENV
7373
- name: Build
7474
id: docker_build
75-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
75+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
7676
with:
7777
load: true
7878
context: ./

‎.github/workflows/go-e2e.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
working-directory: .github/scripts/server-mock
7373
- name: Set up Docker Buildx
7474
id: buildx
75-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
75+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
7676
- name: Cache Docker layers
7777
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
7878
with:
@@ -84,7 +84,7 @@ jobs:
8484
run: echo "GITHUB_SHA_SHORT=$(echo $GITHUB_SHA | cut -c 1-8)" >> $GITHUB_ENV
8585
- name: Build
8686
id: docker_build
87-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
87+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
8888
with:
8989
load: true
9090
context: ./

‎.github/workflows/go-generate-antlr-parser.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ jobs:
1717
- name: Checkout Source
1818
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1919
- name: Set up Docker Buildx
20-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
20+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
2121
- name: Build ANTLR image
22-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
22+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
2323
id: build_antlr_image
2424
with:
2525
context: .
@@ -29,7 +29,7 @@ jobs:
2929
run: |
3030
docker run --rm -u $(id -u ${USER}):$(id -g ${USER}) -v $(pwd)/pkg/parser/jsonfilter:/work -it antlr4-generator:dev
3131
- name: Create Pull Request
32-
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v6
32+
uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1
3333
with:
3434
title: "chore(parser): updating AWS jsonfilter ANTLR generated parser"
3535
token: ${{ secrets.KICS_BOT_PAT }}

‎.github/workflows/prepare-release.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
sed -E -i "s/(<p.*>)[0-9]{4}\.[0-9]{2}\.[0-9]{2}<p>/\1${{ steps.cdate.outputs.date }}<p>/" docs/index.md
3131
sed -E -i "s/(<a.*href=\"https:\/\/github.com\/Checkmarx\/kics\/releases\/download\/).*(\/kics_).*(_[a-z]+_.*>)/\1v${{ github.event.inputs.version }}\2${{ github.event.inputs.version }}\3/g" docs/index.md
3232
- name: Create pull request
33-
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v6
33+
uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1
3434
with:
3535
title: "docs(kicsbot): preparing for release ${{ github.event.inputs.version }}"
3636
token: ${{ secrets.KICS_BOT_PAT }}

‎.github/workflows/release-dkr-image.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -36,14 +36,14 @@ jobs:
3636
- name: View HEAD Commit
3737
value: https://github.com/Checkmarx/kics/commit/${{ github.sha }}
3838
- name: Set up QEMU
39-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v2
39+
uses: step-security/setup-qemu-action@109c6ed9f089be1a250c75fd6a534e30df44e030 # v4.0.0
4040
with:
4141
image: tonistiigi/binfmt:latest
4242
platforms: linux/amd64,linux/arm64
4343
- name: Set up Docker Buildx
44-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
44+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
4545
- name: Login to DockerHub
46-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
46+
uses: step-security/docker-login-action@870af644803bf9f204aed474adbad2958fec048b # v4.1.0
4747
with:
4848
username: ${{ secrets.DOCKER_USERNAME }}
4949
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -67,7 +67,7 @@ jobs:
6767
org.opencontainers.image.revision=${{ github.sha }}
6868
org.opencontainers.image.created=${{ env.CREATED_AT }}
6969
- name: Push main to Docker Hub
70-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
70+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
7171
id: build_main
7272
with:
7373
context: .
@@ -82,7 +82,7 @@ jobs:
8282
labels: ${{ steps.meta.outputs.labels }}
8383
- name: Build and push alpine to Docker Hub
8484
id: build_alpine
85-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
85+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
8686
with:
8787
context: .
8888
file: ./docker/Dockerfile.alpine
@@ -97,7 +97,7 @@ jobs:
9797
labels: ${{ steps.meta.outputs.labels }}
9898
- name: Build and push debian to Docker Hub
9999
id: build_debian
100-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
100+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
101101
with:
102102
context: .
103103
file: ./docker/Dockerfile.debian
@@ -112,7 +112,7 @@ jobs:
112112
labels: ${{ steps.meta.outputs.labels }}
113113
- name: Build and push ubi8 to Docker Hub
114114
id: build_ubi8
115-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
115+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
116116
with:
117117
context: .
118118
file: ./docker/Dockerfile.ubi8

‎.github/workflows/release-docker-github-actions.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -24,14 +24,14 @@ jobs:
2424
with:
2525
ref: ${{ github.event.inputs.version }}
2626
- name: Set up QEMU
27-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v2
27+
uses: step-security/setup-qemu-action@109c6ed9f089be1a250c75fd6a534e30df44e030 # v4.0.0
2828
with:
2929
image: tonistiigi/binfmt:latest
3030
platforms: linux/amd64,linux/arm64
3131
- name: Set up Docker Buildx
32-
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
32+
uses: step-security/setup-buildx-action@f931205d68723ad9589fd2a7e2ece238bf9de341 # v4.0.0
3333
- name: Login to DockerHub
34-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
34+
uses: step-security/docker-login-action@870af644803bf9f204aed474adbad2958fec048b # v4.1.0
3535
with:
3636
username: ${{ secrets.DOCKER_USERNAME }}
3737
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -55,7 +55,7 @@ jobs:
5555
org.opencontainers.image.revision=${{ github.sha }}
5656
org.opencontainers.image.created=${{ env.CREATED_AT }}
5757
- name: Push Github Action Image to Docker Hub
58-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
58+
uses: step-security/docker-build-push-action@846549baaf047e867d038826129a64d81df0f704 # v7.1.0
5959
id: build_gh_action
6060
with:
6161
context: .
@@ -73,7 +73,7 @@ jobs:
7373
with:
7474
fetch-depth: 0
7575
- name: Create Pull Request
76-
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v6
76+
uses: step-security/create-pull-request@50c103da2b9ca12cd5bc013fc6931051a5aa872b # v8.1.1
7777
with:
7878
title: "docs(kicsbot): update images digest"
7979
token: ${{ secrets.KICS_BOT_PAT }}

0 commit comments

Comments
 (0)