@@ -37,21 +37,19 @@ jobs:
3737 # https://github.com/sigstore/cosign-installer
3838 - name : Install cosign
3939 if : github.event_name != 'pull_request'
40- uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
41- with :
42- cosign-release : " v2.2.4"
40+ uses : sigstore/cosign-installer@v3
4341
4442 # Set up BuildKit Docker container builder to be able to build
4543 # multi-platform images and export cache
4644 # https://github.com/docker/setup-buildx-action
4745 - name : Set up Docker Buildx
48- uses : docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
46+ uses : docker/setup-buildx-action@v3
4947
5048 # Login against a Docker registry except on PR
5149 # https://github.com/docker/login-action
5250 - name : Log into registry ${{ env.REGISTRY }}
5351 if : github.event_name != 'pull_request'
54- uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
52+ uses : docker/login-action@v3
5553 with :
5654 registry : ${{ env.REGISTRY }}
5755 username : ${{ github.actor }}
@@ -61,15 +59,15 @@ jobs:
6159 # https://github.com/docker/metadata-action
6260 - name : Extract Docker metadata
6361 id : meta
64- uses : docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
62+ uses : docker/metadata-action@v5
6563 with :
6664 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
6765
6866 # Build and push Docker image with Buildx (don't push on PR)
6967 # https://github.com/docker/build-push-action
7068 - name : Build and push Docker image
7169 id : build-and-push
72- uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
70+ uses : docker/build-push-action@v6
7371 with :
7472 context : .
7573 push : ${{ github.event_name != 'pull_request' }}
0 commit comments