@@ -37,21 +37,19 @@ jobs:
37
37
# https://github.com/sigstore/cosign-installer
38
38
- name : Install cosign
39
39
if : github.event_name != 'pull_request'
40
- uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
41
- with :
42
- cosign-release : " v2.2.4"
40
+ uses : sigstore/cosign-installer@v3
43
41
44
42
# Set up BuildKit Docker container builder to be able to build
45
43
# multi-platform images and export cache
46
44
# https://github.com/docker/setup-buildx-action
47
45
- name : Set up Docker Buildx
48
- uses : docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
46
+ uses : docker/setup-buildx-action@v3
49
47
50
48
# Login against a Docker registry except on PR
51
49
# https://github.com/docker/login-action
52
50
- name : Log into registry ${{ env.REGISTRY }}
53
51
if : github.event_name != 'pull_request'
54
- uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
52
+ uses : docker/login-action@v3
55
53
with :
56
54
registry : ${{ env.REGISTRY }}
57
55
username : ${{ github.actor }}
@@ -61,15 +59,15 @@ jobs:
61
59
# https://github.com/docker/metadata-action
62
60
- name : Extract Docker metadata
63
61
id : meta
64
- uses : docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
62
+ uses : docker/metadata-action@v5
65
63
with :
66
64
images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
67
65
68
66
# Build and push Docker image with Buildx (don't push on PR)
69
67
# https://github.com/docker/build-push-action
70
68
- name : Build and push Docker image
71
69
id : build-and-push
72
- uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
70
+ uses : docker/build-push-action@v6
73
71
with :
74
72
context : .
75
73
push : ${{ github.event_name != 'pull_request' }}
0 commit comments