diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index fe72c3f..8e1a0b5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -36,7 +36,7 @@ jobs: submodules: true - name: Run Linter - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1 + uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 with: working-directory: lintapp version: latest diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 56b3234..5bd05ab 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -103,7 +103,7 @@ jobs: git config --global url.git@github.com:.insteadOf https://github.com/ # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: languages: ${{ matrix.language }} build-mode: ${{ inputs.build-mode }} @@ -125,7 +125,7 @@ jobs: run: | eval "${BUILD_CMD}" - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 with: output: codeql-results category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/docker-buildx-push.yml b/.github/workflows/docker-buildx-push.yml index 41eb624..579c8c3 100644 --- a/.github/workflows/docker-buildx-push.yml +++ b/.github/workflows/docker-buildx-push.yml @@ -45,11 +45,11 @@ jobs: go-version: 'stable' check-latest: true - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to Docker Hub - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} @@ -59,7 +59,7 @@ jobs: cosign-release: 'v2.6.2' - name: Build and push id: build-and-push - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: . file: ${{ inputs.docker_file }} diff --git a/.github/workflows/goLint.yml b/.github/workflows/goLint.yml index ebce491..1f42ea7 100644 --- a/.github/workflows/goLint.yml +++ b/.github/workflows/goLint.yml @@ -118,7 +118,7 @@ jobs: run: go mod tidy -diff - name: Run Linter - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1 + uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 if: success() || failure() # run this step even if the previous one failed with: version: ${{ inputs.golangci-lint-version }} diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml index 9a67bfe..6edf15d 100644 --- a/.github/workflows/goreleaser.yml +++ b/.github/workflows/goreleaser.yml @@ -137,7 +137,7 @@ jobs: env: GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }} - name: Run GoReleaser Pro - uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2 + uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3 with: distribution: goreleaser-pro version: "v2.10.2"