@@ -81,21 +81,21 @@ jobs:
8181 # Set up Buildx for multi-arch builds
8282 # ----------------------------
8383 - name : Set up Docker Buildx
84- uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
84+ uses : docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
8585
8686 # ----------------------------
8787 # Log in to registries
8888 # ----------------------------
8989 - name : Log in to GHCR
90- uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
90+ uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
9191 with :
9292 registry : ghcr.io
9393 username : ${{ github.actor }}
9494 password : ${{ secrets.GITHUB_TOKEN }}
9595
9696 - name : Log in to Docker Hub
9797 if : ${{ inputs.environment == 'docker-publish' && github.event_name != 'pull_request' }}
98- uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
98+ uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
9999 with :
100100 username : ${{ secrets.DOCKERHUB_USERNAME }}
101101 password : ${{ secrets.DOCKERHUB_TOKEN }}
@@ -105,7 +105,7 @@ jobs:
105105 # ----------------------------
106106 - name : Extract metadata (tags, labels)
107107 id : meta
108- uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
108+ uses : docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6
109109 with :
110110 images : ${{ inputs.images || format('ghcr.io/{0}', github.repository) }}
111111 tags : ${{ inputs.tags || format('type=raw,value={0}-{1}', github.ref_name, github.sha) }}
@@ -155,7 +155,7 @@ jobs:
155155 # ----------------------------
156156 - name : Build and (conditionally) push ${{ matrix.platform }}
157157 id : build
158- uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
158+ uses : docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
159159 with :
160160 context : .
161161 platforms : ${{ matrix.platform }}
@@ -189,7 +189,7 @@ jobs:
189189 # ----------------------------
190190 - name : Upload digest
191191 if : ${{ github.event_name != 'pull_request' }}
192- uses : actions/upload-artifact@v4
192+ uses : actions/upload-artifact@v6
193193 with :
194194 name : digest-${{ matrix.arch }}
195195 path : ${{ steps.digest.outputs.file }}
@@ -213,25 +213,25 @@ jobs:
213213 uses : actions/checkout@v5
214214
215215 - name : Log in to GHCR
216- uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
216+ uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
217217 with :
218218 registry : ghcr.io
219219 username : ${{ github.actor }}
220220 password : ${{ secrets.GITHUB_TOKEN }}
221221
222222 - name : Log in to Docker Hub
223223 if : ${{ inputs.environment == 'docker-publish' }}
224- uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
224+ uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
225225 with :
226226 username : ${{ secrets.DOCKERHUB_USERNAME }}
227227 password : ${{ secrets.DOCKERHUB_TOKEN }}
228228
229229 - name : Set up Docker Buildx
230- uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
230+ uses : docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
231231
232232 - name : Extract metadata (tags, labels)
233233 id : meta
234- uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
234+ uses : docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6
235235 with :
236236 images : ${{ inputs.images || format('ghcr.io/{0}', github.repository) }}
237237 tags : ${{ inputs.tags || format('type=raw,value={0}-{1}', github.ref_name, github.sha) }}
@@ -240,7 +240,7 @@ jobs:
240240 # Retrieve digest artifacts from each architecture
241241 # ----------------------------
242242 - name : Download digests
243- uses : actions/download-artifact@v4
243+ uses : actions/download-artifact@v8
244244 with :
245245 pattern : digest-*
246246 path : ./digests
@@ -375,7 +375,7 @@ jobs:
375375 # Recompute metadata so scan can reference same tags
376376 - name : Extract metadata (tags)
377377 id : meta
378- uses : docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
378+ uses : docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6
379379 with :
380380 images : ${{ inputs.images || format('ghcr.io/{0}', github.repository) }}
381381 tags : ${{ inputs.tags || format('type=raw,value={0}-{1}', github.ref_name, github.sha) }}
0 commit comments