@@ -74,10 +74,10 @@ jobs:
7474 uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
7575
7676 - name : Set up Docker Buildx
77- uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
77+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
7878
7979 - name : Set up Cosign
80- uses : sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
80+ uses : sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
8181 if : ${{ inputs.publish }}
8282
8383 - name : Set image name
@@ -112,7 +112,7 @@ jobs:
112112
113113 - name : Build and push image
114114 id : build
115- uses : docker/build-push-action@1dc73863535b631f98b2378be8619f83b136f4a0 # v6.17 .0
115+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18 .0
116116 with :
117117 context : .
118118 platforms : linux/amd64,linux/arm64
@@ -196,7 +196,7 @@ jobs:
196196 tar -xf image.tar -C image
197197
198198 - name : Run Trivy vulnerability scanner
199- uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
199+ uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32 .0
200200 env :
201201 TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
202202 TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -213,7 +213,7 @@ jobs:
213213 retention-days : 5
214214
215215 - name : Upload Trivy scan results to GitHub Security tab
216- uses : github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
216+ uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
217217 with :
218218 sarif_file : trivy-results.sarif
219219
@@ -242,7 +242,7 @@ jobs:
242242 version : v3.13.3
243243
244244 - name : Set up Cosign
245- uses : sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
245+ uses : sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
246246 if : inputs.publish && inputs.release
247247
248248 - name : Set chart name
@@ -351,7 +351,7 @@ jobs:
351351 fi
352352
353353 - name : Run Trivy vulnerability scanner
354- uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
354+ uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32 .0
355355 env :
356356 TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
357357 TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -369,7 +369,7 @@ jobs:
369369 retention-days : 5
370370
371371 - name : Upload Trivy scan results to GitHub Security tab
372- uses : github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
372+ uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
373373 with :
374374 sarif_file : trivy-results.sarif
375375
@@ -403,7 +403,7 @@ jobs:
403403 version : v3.13.3
404404
405405 - name : Set up Cosign
406- uses : sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
406+ uses : sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
407407 if : inputs.publish && inputs.release
408408
409409 - name : Set chart name
@@ -475,7 +475,7 @@ jobs:
475475 --certificate-oidc-issuer "https://token.actions.githubusercontent.com" | jq
476476
477477 - name : Run Trivy vulnerability scanner
478- uses : aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30 .0
478+ uses : aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # 0.32 .0
479479 env :
480480 TRIVY_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-db:2
481481 TRIVY_JAVA_DB_REPOSITORY : public.ecr.aws/aquasecurity/trivy-java-db:1
@@ -493,6 +493,6 @@ jobs:
493493 retention-days : 5
494494
495495 - name : Upload Trivy scan results to GitHub Security tab
496- uses : github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
496+ uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
497497 with :
498498 sarif_file : trivy-results.sarif
0 commit comments