|
26 | 26 | - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
27 | 27 |
|
28 | 28 | - name: Lint Dockerfile |
29 | | - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 |
| 29 | + uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0 |
30 | 30 | with: |
31 | 31 | dockerfile: Dockerfile |
32 | 32 | config: .hadolint.yaml |
|
70 | 70 |
|
71 | 71 | - name: Upload Trivy SARIF results |
72 | 72 | if: always() |
73 | | - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 |
| 73 | + uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 |
74 | 74 | with: |
75 | 75 | sarif_file: trivy-results.sarif |
76 | 76 |
|
@@ -255,15 +255,15 @@ jobs: |
255 | 255 |
|
256 | 256 | - name: "[DOCKERHUB] Log in" |
257 | 257 | if: steps.version.outputs.is_new == 'true' |
258 | | - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 |
| 258 | + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 |
259 | 259 | with: |
260 | 260 | username: ${{ secrets.DOCKERHUB_USERNAME }} |
261 | 261 | password: ${{ secrets.DOCKERHUB_PASSWORD }} |
262 | 262 |
|
263 | 263 | - name: "[GHCR] Log in" |
264 | 264 | if: steps.version.outputs.is_new == 'true' |
265 | 265 | continue-on-error: true |
266 | | - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 |
| 266 | + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 |
267 | 267 | with: |
268 | 268 | registry: ${{ env.GHCR_REGISTRY }} |
269 | 269 | username: ${{ github.actor }} |
@@ -294,7 +294,7 @@ jobs: |
294 | 294 | - name: "[GHCR] Generate artifact attestation" |
295 | 295 | if: steps.version.outputs.is_new == 'true' |
296 | 296 | continue-on-error: true |
297 | | - uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 |
| 297 | + uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1 |
298 | 298 | with: |
299 | 299 | subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_REPO }} |
300 | 300 | subject-digest: ${{ steps.push.outputs.digest }} |
|
0 commit comments