Skip to content

Commit 9a4eaf9

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): Bump the github-actions group across 1 directory with 4 updates (#313)
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [imjasonh/setup-crane](https://github.com/imjasonh/setup-crane), [github/codeql-action](https://github.com/github/codeql-action) and [advanced-security/spdx-dependency-submission-action](https://github.com/advanced-security/spdx-dependency-submission-action). Updates `actions/checkout` from 4.1.6 to 4.1.7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@a5ac7e5...692973e) Updates `imjasonh/setup-crane` from 0.3 to 0.4 - [Release notes](https://github.com/imjasonh/setup-crane/releases) - [Commits](imjasonh/setup-crane@00c9e93...31b88ef) Updates `github/codeql-action` from 3.25.8 to 3.25.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2e230e8...530d4fe) Updates `advanced-security/spdx-dependency-submission-action` from 0.0.1 to 0.1.1 - [Release notes](https://github.com/advanced-security/spdx-dependency-submission-action/releases) - [Changelog](https://github.com/advanced-security/spdx-dependency-submission-action/blob/main/.release.yml) - [Commits](advanced-security/spdx-dependency-submission-action@dc069b5...5530bab) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: imjasonh/setup-crane dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: advanced-security/spdx-dependency-submission-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 4452654 commit 9a4eaf9

File tree

3 files changed

+16
-16
lines changed

3 files changed

+16
-16
lines changed

‎.github/workflows/commit.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
PLATFORMS: "linux/amd64,linux/arm64"
2727
steps:
2828
- name: Checkout
29-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
29+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
3030

3131
- name: Setup
3232
id: setup
@@ -39,7 +39,7 @@ jobs:
3939
echo "SOURCE_DATE_EPOCH=${source_date_epoch}" >> "${GITHUB_ENV}"
4040
4141
- name: Install Crane
42-
uses: imjasonh/setup-crane@00c9e93efa4e1138c9a7a5c594acd6c75a2fbf0c # v0.3
42+
uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
4343

4444
- name: Install Syft
4545
uses: anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
@@ -79,7 +79,7 @@ jobs:
7979
hadolint --no-fail --format sarif ./${{ matrix.variant }}.dockerfile > ./hadolint-${{ matrix.variant }}.sarif
8080
8181
- name: Upload Hadolint SARIF report
82-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
82+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
8383
with:
8484
category: hadolint-${{ matrix.variant }}
8585
sarif_file: hadolint-${{ matrix.variant }}.sarif
@@ -151,7 +151,7 @@ jobs:
151151
path: "*.spdx.json"
152152

153153
- name: Upload SBOMs to Dependency Graph
154-
uses: advanced-security/spdx-dependency-submission-action@dc069b56ba31ce546dc419b549aceb808c632d9a # v0.0.1
154+
uses: advanced-security/spdx-dependency-submission-action@5530bab9ee4bbe66420ce8280624036c77f89746 # v0.1.1
155155
with:
156156
token: ${{ secrets.GITHUB_TOKEN }}
157157
filePath: "."
@@ -174,7 +174,7 @@ jobs:
174174
echo "path=${directory_path}" >> $GITHUB_OUTPUT
175175
176176
- name: Upload Grype SARIF report
177-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
177+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
178178
with:
179179
category: grype-${{ matrix.variant }}
180180
sarif_file: ${{ steps.grype.outputs.path }}

‎.github/workflows/pull-request.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
PLATFORMS: "linux/amd64,linux/arm64"
2626
steps:
2727
- name: Checkout
28-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
28+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2929

3030
- name: Setup
3131
id: setup
@@ -38,7 +38,7 @@ jobs:
3838
echo "SOURCE_DATE_EPOCH=${source_date_epoch}" >> "${GITHUB_ENV}"
3939
4040
- name: Install Crane
41-
uses: imjasonh/setup-crane@00c9e93efa4e1138c9a7a5c594acd6c75a2fbf0c # v0.3
41+
uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
4242

4343
- name: Install Syft
4444
uses: anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
@@ -75,7 +75,7 @@ jobs:
7575
hadolint --no-fail --format sarif ./${{ matrix.variant }}.dockerfile > ./hadolint-${{ matrix.variant }}.sarif
7676
7777
- name: Upload Hadolint SARIF report
78-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
78+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
7979
with:
8080
category: hadolint-${{ matrix.variant }}
8181
sarif_file: hadolint-${{ matrix.variant }}.sarif
@@ -142,7 +142,7 @@ jobs:
142142
path: "*.spdx.json"
143143

144144
- name: Upload SBOMs to Dependency Graph
145-
uses: advanced-security/spdx-dependency-submission-action@dc069b56ba31ce546dc419b549aceb808c632d9a # v0.0.1
145+
uses: advanced-security/spdx-dependency-submission-action@5530bab9ee4bbe66420ce8280624036c77f89746 # v0.1.1
146146
with:
147147
token: ${{ secrets.GITHUB_TOKEN }}
148148
filePath: "."
@@ -165,7 +165,7 @@ jobs:
165165
echo "path=${directory_path}" >> $GITHUB_OUTPUT
166166
167167
- name: Upload Grype SARIF report
168-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
168+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
169169
with:
170170
category: grype-${{ matrix.variant }}
171171
sarif_file: ${{ steps.grype.outputs.path }}

‎.github/workflows/release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
PLATFORMS: "linux/amd64,linux/arm64"
2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
24+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2525

2626
- name: Setup
2727
id: setup
@@ -34,7 +34,7 @@ jobs:
3434
echo "SOURCE_DATE_EPOCH=${source_date_epoch}" >> "${GITHUB_ENV}"
3535
3636
- name: Install Crane
37-
uses: imjasonh/setup-crane@00c9e93efa4e1138c9a7a5c594acd6c75a2fbf0c # v0.3
37+
uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
3838

3939
- name: Install Syft
4040
uses: anchore/sbom-action/download-syft@e8d2a6937ecead383dfe75190d104edd1f9c5751 # v0.16.0
@@ -74,7 +74,7 @@ jobs:
7474
hadolint --no-fail --format sarif ./${{ matrix.variant }}.dockerfile > ./hadolint-${{ matrix.variant }}.sarif
7575
7676
- name: Upload Hadolint SARIF report
77-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
77+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
7878
with:
7979
category: hadolint-${{ matrix.variant }}
8080
sarif_file: hadolint-${{ matrix.variant }}.sarif
@@ -149,7 +149,7 @@ jobs:
149149
path: "*.spdx.json"
150150

151151
- name: Upload SBOMs to Dependency Graph
152-
uses: advanced-security/spdx-dependency-submission-action@dc069b56ba31ce546dc419b549aceb808c632d9a # v0.0.1
152+
uses: advanced-security/spdx-dependency-submission-action@5530bab9ee4bbe66420ce8280624036c77f89746 # v0.1.1
153153
with:
154154
token: ${{ secrets.GITHUB_TOKEN }}
155155
filePath: "."
@@ -172,7 +172,7 @@ jobs:
172172
echo "path=${directory_path}" >> $GITHUB_OUTPUT
173173
174174
- name: Upload Grype SARIF report
175-
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8
175+
uses: github/codeql-action/upload-sarif@530d4feaa9c62aaab2d250371e2061eb7a172363 # v3.25.9
176176
with:
177177
category: grype-${{ matrix.variant }}
178178
sarif_file: ${{ steps.grype.outputs.path }}
@@ -261,7 +261,7 @@ jobs:
261261
needs: build
262262
steps:
263263
- name: Checkout
264-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
264+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
265265

266266
- name: Update Docker repository description
267267
uses: peter-evans/dockerhub-description@e98e4d1628a5f3be2be7c231e50981aee98723ae # v4.0.0

0 commit comments

Comments
 (0)