File tree 3 files changed +13
-13
lines changed
3 files changed +13
-13
lines changed Original file line number Diff line number Diff line change 12
12
name : Lint
13
13
runs-on : ubuntu-latest
14
14
steps :
15
- - uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
15
+ - uses : step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
16
16
with :
17
17
disable-sudo : true
18
18
egress-policy : block
34
34
35
35
# Linting
36
36
- name : Linting
37
- uses : golangci/golangci-lint-action@051d91933864810ecd5e2ea2cfd98f6a5bca5347
37
+ uses : golangci/golangci-lint-action@456fc0f7358ebf6cdd48ca0d2d56e88a6c7aa077
38
38
with :
39
39
version : latest
40
40
args : --config=./.github/.golangci.yml ./...
48
48
matrix :
49
49
go : [ '1.22', '1.21' ]
50
50
steps :
51
- - uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
51
+ - uses : step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
52
52
with :
53
53
disable-sudo : true
54
54
egress-policy : block
75
75
name : Analyze
76
76
runs-on : ubuntu-latest
77
77
steps :
78
- - uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
78
+ - uses : step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
79
79
with :
80
80
disable-sudo : true
81
81
egress-policy : block
@@ -106,7 +106,7 @@ jobs:
106
106
107
107
# Codecov
108
108
- name : Codecov
109
- uses : codecov/codecov-action@4898080f15c09ae860fcec6796854d10a2e23de8
109
+ uses : codecov/codecov-action@1fecca8ce3a22284e70b371077fb5219f54095b8
110
110
env :
111
111
CODECOV_TOKEN : ${{ secrets.CODECOV_TOKEN }}
112
112
with :
Original file line number Diff line number Diff line change 23
23
fail-fast : false
24
24
25
25
steps :
26
- - uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
26
+ - uses : step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
27
27
with :
28
28
disable-sudo : true
29
29
egress-policy : block
@@ -35,12 +35,12 @@ jobs:
35
35
36
36
# Initializes the CodeQL tools for scanning.
37
37
- name : Initialize CodeQL
38
- uses : github/codeql-action/init@606392577144219644443c010bc0e17ad563e559
38
+ uses : github/codeql-action/init@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
39
39
with :
40
40
languages : go
41
41
42
42
- name : Autobuild
43
- uses : github/codeql-action/autobuild@606392577144219644443c010bc0e17ad563e559
43
+ uses : github/codeql-action/autobuild@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
44
44
45
45
- name : Perform CodeQL Analysis
46
- uses : github/codeql-action/analyze@606392577144219644443c010bc0e17ad563e559
46
+ uses : github/codeql-action/analyze@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
Original file line number Diff line number Diff line change 22
22
id-token : write
23
23
24
24
steps :
25
- - uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e
25
+ - uses : step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
26
26
with :
27
27
disable-sudo : true
28
28
egress-policy : block
43
43
persist-credentials : false
44
44
45
45
- name : " Run analysis"
46
- uses : ossf/scorecard-action@620fd28d6b2ba01c1d70cf63dfb4bdf868e19d6f
46
+ uses : ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186
47
47
with :
48
48
results_file : results.sarif
49
49
results_format : sarif
@@ -61,14 +61,14 @@ jobs:
61
61
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
62
62
# format to the repository Actions tab.
63
63
- name : " Upload artifact"
64
- uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08
64
+ uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1
65
65
with :
66
66
name : SARIF file
67
67
path : results.sarif
68
68
retention-days : 5
69
69
70
70
# required for Code scanning alerts
71
71
- name : " Upload SARIF results to code scanning"
72
- uses : github/codeql-action/upload-sarif@606392577144219644443c010bc0e17ad563e559
72
+ uses : github/codeql-action/upload-sarif@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
73
73
with :
74
74
sarif_file : results.sarif
You can’t perform that action at this time.
0 commit comments