Skip to content

Commit d4fdfeb

Browse files
Update github-actions (#81)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent d0afa87 commit d4fdfeb

File tree

3 files changed

+13
-13
lines changed

3 files changed

+13
-13
lines changed

.github/workflows/ci.yml

+5-5
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
name: Lint
1313
runs-on: ubuntu-latest
1414
steps:
15-
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
15+
- uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
1616
with:
1717
disable-sudo: true
1818
egress-policy: block
@@ -34,7 +34,7 @@ jobs:
3434

3535
# Linting
3636
- name: Linting
37-
uses: golangci/golangci-lint-action@051d91933864810ecd5e2ea2cfd98f6a5bca5347
37+
uses: golangci/golangci-lint-action@456fc0f7358ebf6cdd48ca0d2d56e88a6c7aa077
3838
with:
3939
version: latest
4040
args: --config=./.github/.golangci.yml ./...
@@ -48,7 +48,7 @@ jobs:
4848
matrix:
4949
go: [ '1.22', '1.21' ]
5050
steps:
51-
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
51+
- uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
5252
with:
5353
disable-sudo: true
5454
egress-policy: block
@@ -75,7 +75,7 @@ jobs:
7575
name: Analyze
7676
runs-on: ubuntu-latest
7777
steps:
78-
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
78+
- uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
7979
with:
8080
disable-sudo: true
8181
egress-policy: block
@@ -106,7 +106,7 @@ jobs:
106106

107107
# Codecov
108108
- name: Codecov
109-
uses: codecov/codecov-action@4898080f15c09ae860fcec6796854d10a2e23de8
109+
uses: codecov/codecov-action@1fecca8ce3a22284e70b371077fb5219f54095b8
110110
env:
111111
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
112112
with:

.github/workflows/codeql.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
fail-fast: false
2424

2525
steps:
26-
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
26+
- uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
2727
with:
2828
disable-sudo: true
2929
egress-policy: block
@@ -35,12 +35,12 @@ jobs:
3535

3636
# Initializes the CodeQL tools for scanning.
3737
- name: Initialize CodeQL
38-
uses: github/codeql-action/init@606392577144219644443c010bc0e17ad563e559
38+
uses: github/codeql-action/init@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
3939
with:
4040
languages: go
4141

4242
- name: Autobuild
43-
uses: github/codeql-action/autobuild@606392577144219644443c010bc0e17ad563e559
43+
uses: github/codeql-action/autobuild@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
4444

4545
- name: Perform CodeQL Analysis
46-
uses: github/codeql-action/analyze@606392577144219644443c010bc0e17ad563e559
46+
uses: github/codeql-action/analyze@ff79de67cc25c7617163ae1e4b8aa23b902fdf15

.github/workflows/scorecards.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
id-token: write
2323

2424
steps:
25-
- uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
25+
- uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
2626
with:
2727
disable-sudo: true
2828
egress-policy: block
@@ -43,7 +43,7 @@ jobs:
4343
persist-credentials: false
4444

4545
- name: "Run analysis"
46-
uses: ossf/scorecard-action@620fd28d6b2ba01c1d70cf63dfb4bdf868e19d6f
46+
uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186
4747
with:
4848
results_file: results.sarif
4949
results_format: sarif
@@ -61,14 +61,14 @@ jobs:
6161
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6262
# format to the repository Actions tab.
6363
- name: "Upload artifact"
64-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
64+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
6565
with:
6666
name: SARIF file
6767
path: results.sarif
6868
retention-days: 5
6969

7070
# required for Code scanning alerts
7171
- name: "Upload SARIF results to code scanning"
72-
uses: github/codeql-action/upload-sarif@606392577144219644443c010bc0e17ad563e559
72+
uses: github/codeql-action/upload-sarif@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
7373
with:
7474
sarif_file: results.sarif

0 commit comments

Comments
 (0)