Merge branch 'main' into I91-LogTamperingAnalysis

Author: hilmarf

.github/workflows/build.yaml

@@ -0,0 +1,26 @@
+name: build clients
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - "src/**"
+
+jobs:
+  # test locally with: `act -s GITHUB_TOKEN=$(gh auth token) --env github.actor=$USER`
+  # get 'act': https://nektosact.com/installation/index.html
+  build-clients:
+    name: Build clients
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Install Task
+        uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v2.0.0
+        with:
+          version: 3.x
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Checkout Code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: run task clients:build
+        run: task clients:build

.github/workflows/code-lint.yaml

@@ -31,6 +31,6 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Do some linting
         run: task code:lint

.github/workflows/dice-go.yaml

@@ -23,7 +23,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build image
         run: task clients:build-dice-go
       - name: Login to GitHub Container Registry

.github/workflows/dice-java.yaml

@@ -23,7 +23,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build image
         run: task clients:build-dice-java
       - name: Login to GitHub Container Registry

.github/workflows/loggen-go.yaml

@@ -23,7 +23,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build image
         run: task clients:build-loggen-go
       - name: Login to GitHub Container Registry

.github/workflows/recommendation.yaml

@@ -23,7 +23,7 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build image
         run: task clients:build-recommendation
       - name: Login to GitHub Container Registry

.github/workflows/spellcheck.yaml

@@ -25,6 +25,6 @@ jobs:
           version: 3.x
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Checkout Code
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check spelling
         run: task code:spellcheck

src/dice-go/Dockerfile

@@ -1,5 +1,5 @@
 # --- Build Stage ---
-FROM golang:1.25-bookworm AS builder
+FROM golang:1.26-alpine AS builder
 # build the application
 WORKDIR /usr/src/app/
 # let's create separate layers for dependencies and source code
@@ -10,7 +10,7 @@ COPY main.go main.go
 RUN CGO_ENABLED=0 GOOS=linux GO111MODULE=on go build -ldflags "-s -w" -o dice-go main.go
 
 # --- Run Stage ---
-FROM gcr.io/distroless/static-debian12:nonroot
+FROM gcr.io/distroless/static-debian13:nonroot
 
 ARG REST_PORT=8081
 ENV REST_PORT=${REST_PORT}