5555 runs-on : ubuntu-latest
5656 steps :
5757 - name : Checkout code
58- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
58+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5959
6060 - name : Check license headers
6161 uses : firestoned/github-actions/security/license-check@53b483254bc648903c364ee3c73a546d0936a91e # v1.3.6
7171 runs-on : ubuntu-latest
7272 steps :
7373 - name : Checkout code
74- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
74+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7575 with :
7676 fetch-depth : 0
7777
@@ -107,7 +107,7 @@ jobs:
107107 needs : [license-check, verify-commits]
108108 steps :
109109 - name : Checkout code
110- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
110+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
111111
112112 - name : Install Rust toolchain
113113 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -124,7 +124,7 @@ jobs:
124124 needs : [format]
125125 steps :
126126 - name : Checkout code
127- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
127+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
128128
129129 - name : Install Rust toolchain
130130 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -151,7 +151,7 @@ jobs:
151151 needs : [verify-commits]
152152 steps :
153153 - name : Checkout code
154- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
154+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
155155
156156 - name : Install vexctl
157157 run : make vexctl-install
@@ -177,7 +177,7 @@ jobs:
177177 short-sha : ${{ steps.version-chainguard.outputs.short-sha }}
178178 steps :
179179 - name : Checkout code
180- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
181181
182182 - name : Extract version for Chainguard
183183 id : version-chainguard
@@ -221,7 +221,7 @@ jobs:
221221 binary_name : 5spot
222222 steps :
223223 - name : Checkout code
224- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
224+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
225225
226226 - name : Update Cargo.toml version
227227 if : github.event_name == 'release'
@@ -277,7 +277,7 @@ jobs:
277277 needs : [build]
278278 steps :
279279 - name : Checkout code
280- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
280+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
281281
282282 - name : Install Rust toolchain
283283 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -331,7 +331,7 @@ jobs:
331331 image-repository : ${{ needs.extract-version.outputs.image-repository-distroless }}
332332 steps :
333333 - name : Checkout code
334- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
334+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
335335
336336 - name : Prepare Docker binaries
337337 uses : ./.github/actions/prepare-docker-binaries
@@ -571,7 +571,7 @@ jobs:
571571 contents : read
572572 steps :
573573 - name : Checkout code
574- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
574+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
575575
576576 - name : Install Rust toolchain
577577 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -679,7 +679,7 @@ jobs:
679679 contents : read
680680 steps :
681681 - name : Checkout code
682- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
682+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
683683
684684 - name : Install Rust toolchain
685685 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -816,7 +816,7 @@ jobs:
816816 packages : write
817817 steps :
818818 - name : Checkout code
819- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
819+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
820820
821821 - name : Install vexctl
822822 run : make vexctl-install
@@ -938,7 +938,7 @@ jobs:
938938 needs : [verify-commits]
939939 steps :
940940 - name : Checkout code
941- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
941+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
942942
943943 - name : Install Rust toolchain
944944 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -979,7 +979,7 @@ jobs:
979979 security-events : write
980980 steps :
981981 - name : Checkout code
982- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
982+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
983983
984984 - name : Run Trivy config scan
985985 uses : aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
@@ -995,7 +995,7 @@ jobs:
995995 trivyignores : ./.trivyignore
996996
997997 - name : Upload Trivy IaC SARIF to Code Scanning
998- uses : github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
998+ uses : github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
999999 with :
10001000 sarif_file : trivy-iac.sarif
10011001 category : trivy-iac
@@ -1013,10 +1013,10 @@ jobs:
10131013 needs : [verify-commits]
10141014 steps :
10151015 - name : Checkout code
1016- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1016+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
10171017
10181018 - name : Run cargo-deny
1019- uses : EmbarkStudios/cargo-deny-action@a531616d8ce3b9177443e48a1159bc945a099823 # v2.0.19
1019+ uses : EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
10201020 with :
10211021 log-level : warn
10221022 command : check
@@ -1063,7 +1063,7 @@ jobs:
10631063 image-repository : ${{ needs.extract-version.outputs.image-repository-distroless }}
10641064 steps :
10651065 - name : Checkout code
1066- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1066+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
10671067
10681068 - name : Log in to GHCR
10691069 uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
@@ -1119,7 +1119,7 @@ jobs:
11191119
11201120 - name : Upload Grype SARIF to Code Scanning
11211121 if : always()
1122- uses : github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
1122+ uses : github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
11231123 with :
11241124 sarif_file : grype-${{ github.event_name }}-${{ matrix.variant.name }}.sarif
11251125 category : grype-${{ github.event_name }}-${{ matrix.variant.name }}
@@ -1155,7 +1155,7 @@ jobs:
11551155 binary_name : 5spot
11561156 steps :
11571157 - name : Checkout code
1158- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1158+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
11591159
11601160 - name : Download binary artifact
11611161 uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -1248,7 +1248,7 @@ jobs:
12481248 needs : [extract-version]
12491249 steps :
12501250 - name : Checkout code
1251- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1251+ uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
12521252
12531253 - name : Install Rust toolchain
12541254 uses : dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
0 commit comments