Skip to content

Commit 15bdd2c

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the github-actions group across 1 directory with 11 updates (aquasecurity#10803)
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 576b093 commit 15bdd2c

9 files changed

Lines changed: 23 additions & 23 deletions

‎.github/workflows/backport.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
# PR would not run CI — generate a GitHub App installation token instead.
3939
- name: Generate token
4040
id: app-token
41-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
41+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
4242
with:
4343
client-id: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_CLIENT_ID }}
4444
private-key: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_PRIVATE_KEY }}

‎.github/workflows/cache-test-assets.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ jobs:
8787
uses: ./.github/actions/setup-go
8888

8989
- name: Run golangci-lint for caching
90-
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
90+
uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
9191
with:
9292
version: v2.12
9393
args: --verbose

‎.github/workflows/mkdocs-latest.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
# workflows in other repos — generate a GitHub App installation token instead.
5050
- name: Generate token
5151
id: app-token
52-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
52+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
5353
with:
5454
client-id: ${{ secrets.ACTIONS_MULTI_WRITE_GH_APP_CLIENT_ID }}
5555
private-key: ${{ secrets.TRIVY_WORKFLOW_TRIGGER_APP_PRIVATE_KEY }}

‎.github/workflows/publish-chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ jobs:
6565
# workflows in other repos — generate a GitHub App installation token instead.
6666
- name: Generate token
6767
id: app-token
68-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
68+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
6969
with:
7070
client-id: ${{ secrets.ACTIONS_MULTI_WRITE_GH_APP_CLIENT_ID }}
7171
private-key: ${{ secrets.TRIVY_WORKFLOW_TRIGGER_APP_PRIVATE_KEY }}

‎.github/workflows/release-please.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
# would not run CI — generate a GitHub App installation token instead.
2222
- name: Generate token
2323
id: app-token
24-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
24+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
2525
with:
2626
client-id: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_CLIENT_ID }}
2727
private-key: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_PRIVATE_KEY }}
@@ -43,7 +43,7 @@ jobs:
4343
# would not run CI — generate a GitHub App installation token instead.
4444
- name: Generate token
4545
id: app-token
46-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
46+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
4747
with:
4848
client-id: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_CLIENT_ID }}
4949
private-key: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_PRIVATE_KEY }}
@@ -86,7 +86,7 @@ jobs:
8686
- name: Generate token
8787
id: app-token
8888
if: ${{ steps.extract_info.outputs.version }}
89-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
89+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
9090
with:
9191
client-id: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_CLIENT_ID }}
9292
private-key: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_PRIVATE_KEY }}

‎.github/workflows/release.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
# workflows in other repos — generate a GitHub App installation token instead.
2929
- name: Generate token
3030
id: app-token
31-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
31+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
3232
with:
3333
client-id: ${{ secrets.ACTIONS_MULTI_WRITE_GH_APP_CLIENT_ID }}
3434
private-key: ${{ secrets.TRIVY_WORKFLOW_TRIGGER_APP_PRIVATE_KEY }}
@@ -53,7 +53,7 @@ jobs:
5353
# version PR would not run CI — generate a GitHub App installation token instead.
5454
- name: Generate token
5555
id: app-token
56-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
56+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
5757
with:
5858
client-id: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_CLIENT_ID }}
5959
private-key: ${{ secrets.REPO_TRIVY_WRITE_GH_APP_PRIVATE_KEY }}
@@ -92,7 +92,7 @@ jobs:
9292
# workflows in other repos — generate a GitHub App installation token instead.
9393
- name: Generate token
9494
id: app-token
95-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
95+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
9696
with:
9797
client-id: ${{ secrets.ACTIONS_MULTI_WRITE_GH_APP_CLIENT_ID }}
9898
private-key: ${{ secrets.TRIVY_WORKFLOW_TRIGGER_APP_PRIVATE_KEY }}

‎.github/workflows/reusable-release.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -42,35 +42,35 @@ jobs:
4242
attestations: write # For build provenance attestations
4343
steps:
4444
- name: Cosign install
45-
uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
45+
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
4646

4747
- name: Set up QEMU
48-
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
48+
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
4949

5050
- name: Set up Docker Buildx
5151
id: buildx
52-
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
52+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
5353

5454
- name: Show available Docker Buildx platforms
5555
env:
5656
PLATFORMS: ${{ steps.buildx.outputs.platforms }}
5757
run: echo "${PLATFORMS}"
5858

5959
- name: Login to docker.io registry
60-
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
60+
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
6161
with:
6262
username: ${{ secrets.DOCKERHUB_USER }}
6363
password: ${{ secrets.DOCKERHUB_TOKEN }}
6464

6565
- name: Login to ghcr.io registry
66-
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
66+
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
6767
with:
6868
registry: ghcr.io
6969
username: ${{ env.GH_USER }}
7070
password: ${{ secrets.GITHUB_TOKEN }}
7171

7272
- name: Login to ECR
73-
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
73+
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
7474
with:
7575
registry: public.ecr.aws
7676
username: ${{ secrets.ECR_ACCESS_KEY_ID }}
@@ -104,7 +104,7 @@ jobs:
104104
105105
- name: GoReleaser
106106
id: goreleaser
107-
uses: goreleaser/goreleaser-action@e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c # v7.1.0
107+
uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
108108
with:
109109
version: v2.16.0
110110
args: release -f=${{ inputs.goreleaser_config}} ${{ inputs.goreleaser_options}}
@@ -123,7 +123,7 @@ jobs:
123123
# because GoReleaser Free doesn't support pushing images with the `--snapshot` flag.
124124
- name: Build and push
125125
if: ${{ inputs.goreleaser_config == 'goreleaser-canary.yml' }}
126-
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
126+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
127127
with:
128128
platforms: linux/amd64, linux/arm64
129129
file: ./Dockerfile.canary # path to Dockerfile

‎.github/workflows/stale-issues.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ jobs:
77
timeout-minutes: 1
88
runs-on: ubuntu-2404-2core
99
steps:
10-
- uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
10+
- uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
1111
with:
1212
repo-token: ${{ secrets.GITHUB_TOKEN }}
1313
stale-pr-message: 'This PR is stale because it has been labeled with inactivity.'

‎.github/workflows/test.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737

3838
- name: Lint
3939
id: lint
40-
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
40+
uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
4141
with:
4242
version: v2.12
4343
args: --verbose
@@ -82,7 +82,7 @@ jobs:
8282
# Remove this temporary solution when the issue is resolved.
8383
# https://github.com/actions/runner-images/issues/13474
8484
- name: Set up Docker
85-
uses: docker/setup-docker-action@b2189fbf2a6592b51fee7cdd93ee2bfaeba733db # v5.1.0
85+
uses: docker/setup-docker-action@0234bb73ccb40f0c430b795634f9247e2b5c2d23 # v5.2.0
8686
with:
8787
version: v29.2.1
8888
set-host: true
@@ -254,7 +254,7 @@ jobs:
254254
fi
255255
256256
- name: Run GoReleaser
257-
uses: goreleaser/goreleaser-action@e24998b8b67b290c2fa8b7c14fcfa7de2c5c9b8c # v7.1.0
257+
uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
258258
with:
259259
version: v2.16.0
260260
args: build --snapshot --clean --timeout 90m ${{ steps.goreleaser_id.outputs.id }}
@@ -270,7 +270,7 @@ jobs:
270270
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
271271
with:
272272
persist-credentials: false
273-
- uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
273+
- uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
274274
with:
275275
inputs: .github/
276276
advanced-security: false

0 commit comments

Comments
 (0)