Skip to content

Commit aea9def

Browse files
authored
Merge branch 'main' into kata-config
2 parents 27ce7df + c5b9ecc commit aea9def

9 files changed

Lines changed: 48 additions & 48 deletions

File tree

.github/workflows/build.yaml

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
runs-on: ubuntu-latest
5656
steps:
5757
- name: Checkout code
58-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
58+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5959

6060
- name: Check license headers
6161
uses: firestoned/github-actions/security/license-check@53b483254bc648903c364ee3c73a546d0936a91e # v1.3.6
@@ -71,7 +71,7 @@ jobs:
7171
runs-on: ubuntu-latest
7272
steps:
7373
- name: Checkout code
74-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
74+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7575
with:
7676
fetch-depth: 0
7777

@@ -107,7 +107,7 @@ jobs:
107107
needs: [license-check, verify-commits]
108108
steps:
109109
- name: Checkout code
110-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
110+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
111111

112112
- name: Install Rust toolchain
113113
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -124,7 +124,7 @@ jobs:
124124
needs: [format]
125125
steps:
126126
- name: Checkout code
127-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
127+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
128128

129129
- name: Install Rust toolchain
130130
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -151,7 +151,7 @@ jobs:
151151
needs: [verify-commits]
152152
steps:
153153
- name: Checkout code
154-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
154+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
155155

156156
- name: Install vexctl
157157
run: make vexctl-install
@@ -177,7 +177,7 @@ jobs:
177177
short-sha: ${{ steps.version-chainguard.outputs.short-sha }}
178178
steps:
179179
- name: Checkout code
180-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
181181

182182
- name: Extract version for Chainguard
183183
id: version-chainguard
@@ -221,7 +221,7 @@ jobs:
221221
binary_name: 5spot
222222
steps:
223223
- name: Checkout code
224-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
224+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
225225

226226
- name: Update Cargo.toml version
227227
if: github.event_name == 'release'
@@ -277,7 +277,7 @@ jobs:
277277
needs: [build]
278278
steps:
279279
- name: Checkout code
280-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
280+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
281281

282282
- name: Install Rust toolchain
283283
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -331,7 +331,7 @@ jobs:
331331
image-repository: ${{ needs.extract-version.outputs.image-repository-distroless }}
332332
steps:
333333
- name: Checkout code
334-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
334+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
335335

336336
- name: Prepare Docker binaries
337337
uses: ./.github/actions/prepare-docker-binaries
@@ -571,7 +571,7 @@ jobs:
571571
contents: read
572572
steps:
573573
- name: Checkout code
574-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
574+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
575575

576576
- name: Install Rust toolchain
577577
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -679,7 +679,7 @@ jobs:
679679
contents: read
680680
steps:
681681
- name: Checkout code
682-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
682+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
683683

684684
- name: Install Rust toolchain
685685
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -816,7 +816,7 @@ jobs:
816816
packages: write
817817
steps:
818818
- name: Checkout code
819-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
819+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
820820

821821
- name: Install vexctl
822822
run: make vexctl-install
@@ -938,7 +938,7 @@ jobs:
938938
needs: [verify-commits]
939939
steps:
940940
- name: Checkout code
941-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
941+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
942942

943943
- name: Install Rust toolchain
944944
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)
@@ -979,7 +979,7 @@ jobs:
979979
security-events: write
980980
steps:
981981
- name: Checkout code
982-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
982+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
983983

984984
- name: Run Trivy config scan
985985
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
@@ -995,7 +995,7 @@ jobs:
995995
trivyignores: ./.trivyignore
996996

997997
- name: Upload Trivy IaC SARIF to Code Scanning
998-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
998+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
999999
with:
10001000
sarif_file: trivy-iac.sarif
10011001
category: trivy-iac
@@ -1013,10 +1013,10 @@ jobs:
10131013
needs: [verify-commits]
10141014
steps:
10151015
- name: Checkout code
1016-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1016+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
10171017

10181018
- name: Run cargo-deny
1019-
uses: EmbarkStudios/cargo-deny-action@a531616d8ce3b9177443e48a1159bc945a099823 # v2.0.19
1019+
uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe # v2.0.20
10201020
with:
10211021
log-level: warn
10221022
command: check
@@ -1063,7 +1063,7 @@ jobs:
10631063
image-repository: ${{ needs.extract-version.outputs.image-repository-distroless }}
10641064
steps:
10651065
- name: Checkout code
1066-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1066+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
10671067

10681068
- name: Log in to GHCR
10691069
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
@@ -1119,7 +1119,7 @@ jobs:
11191119
11201120
- name: Upload Grype SARIF to Code Scanning
11211121
if: always()
1122-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
1122+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
11231123
with:
11241124
sarif_file: grype-${{ github.event_name }}-${{ matrix.variant.name }}.sarif
11251125
category: grype-${{ github.event_name }}-${{ matrix.variant.name }}
@@ -1155,7 +1155,7 @@ jobs:
11551155
binary_name: 5spot
11561156
steps:
11571157
- name: Checkout code
1158-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1158+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
11591159

11601160
- name: Download binary artifact
11611161
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
@@ -1248,7 +1248,7 @@ jobs:
12481248
needs: [extract-version]
12491249
steps:
12501250
- name: Checkout code
1251-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1251+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
12521252

12531253
- name: Install Rust toolchain
12541254
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)

.github/workflows/calm-test.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
runs-on: ubuntu-latest
4444
steps:
4545
- name: Checkout repository
46-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
46+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4747

4848
- name: Install bats-core
4949
run: sudo apt-get update && sudo apt-get install -y bats
@@ -57,7 +57,7 @@ jobs:
5757
runs-on: ubuntu-latest
5858
steps:
5959
- name: Checkout repository
60-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
60+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6161

6262
- name: Run shellcheck
6363
run: shellcheck .github/scripts/calm-args.sh
@@ -84,7 +84,7 @@ jobs:
8484
runs-on: ubuntu-latest
8585
steps:
8686
- name: Checkout repository
87-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
87+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
8888

8989
- name: Prepare inline template
9090
run: |
@@ -126,7 +126,7 @@ jobs:
126126
runs-on: ubuntu-latest
127127
steps:
128128
- name: Checkout repository
129-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
129+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
130130

131131
- name: Unknown command exits non-zero
132132
shell: bash
@@ -150,7 +150,7 @@ jobs:
150150
runs-on: ubuntu-latest
151151
steps:
152152
- name: Checkout repository
153-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
153+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
154154

155155
- name: Unset CMD exits non-zero
156156
shell: bash

.github/workflows/calm.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,7 @@ jobs:
174174

175175
steps:
176176
- name: Checkout repository
177-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
177+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
178178

179179
- name: Set up Node.js
180180
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0

.github/workflows/codeql.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -69,10 +69,10 @@ jobs:
6969

7070
steps:
7171
- name: Checkout code
72-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
72+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7373

7474
- name: Initialize CodeQL
75-
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
75+
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
7676
with:
7777
languages: ${{ matrix.language }}
7878
build-mode: ${{ matrix.build-mode }}
@@ -81,6 +81,6 @@ jobs:
8181
config-file: ./.github/codeql/codeql-config.yml
8282

8383
- name: Perform CodeQL analysis
84-
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
84+
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
8585
with:
8686
category: "/language:${{ matrix.language }}"

.github/workflows/docs.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ jobs:
8989
runs-on: ubuntu-latest
9090
steps:
9191
- name: Checkout repository
92-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
92+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
9393
with:
9494
fetch-depth: 0 # Full history for git-revision-date-localized plugin
9595

.github/workflows/fuzz.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
- parse_hour_ranges
5959
steps:
6060
- name: Checkout code
61-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
61+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6262

6363
- name: Install nightly Rust toolchain
6464
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable (moving ref — re-pin quarterly)

.github/workflows/sast.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
image: returntocorp/semgrep
3636
steps:
3737
- name: Checkout code
38-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
38+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3939

4040
- name: Run Semgrep
4141
run: |
@@ -49,7 +49,7 @@ jobs:
4949
--error || true
5050
5151
- name: Upload Semgrep SARIF to Code Scanning
52-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
52+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
5353
with:
5454
sarif_file: semgrep.sarif
5555
category: semgrep

.github/workflows/scorecard.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737

3838
steps:
3939
- name: "Checkout code"
40-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
40+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4141
with:
4242
persist-credentials: false
4343

@@ -76,6 +76,6 @@ jobs:
7676
# Upload the results to GitHub's code scanning dashboard (optional).
7777
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
7878
- name: "Upload to code-scanning"
79-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
79+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
8080
with:
8181
sarif_file: results.sarif

Cargo.lock

Lines changed: 12 additions & 12 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)