Skip to content

Commit ef0e3a0

Browse files
Update github actions
1 parent f5c079b commit ef0e3a0

7 files changed

Lines changed: 22 additions & 22 deletions

File tree

.github/workflows/checks-codecov.yaml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
runs-on: ubuntu-latest
3838
steps:
3939
- name: Harden Runner
40-
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
40+
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
4141
with:
4242
egress-policy: audit
4343
disable-telemetry: true
@@ -49,7 +49,7 @@ jobs:
4949
fetch-depth: 0
5050

5151
- name: Restore Cache
52-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
52+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5353
with:
5454
key: main
5555
path: '**'
@@ -86,23 +86,23 @@ jobs:
8686
run: make test
8787

8888
- name: Upload unit test coverage report
89-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
89+
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
9090
env:
9191
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
9292
with:
9393
files: ./coverage-unit.out
9494
flags: unit
9595

9696
- name: Upload generative test coverage report
97-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
97+
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
9898
env:
9999
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
100100
with:
101101
files: ./coverage-generative.out
102102
flags: generative
103103

104104
- name: Upload integration test coverage report
105-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
105+
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
106106
env:
107107
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
108108
with:
@@ -124,7 +124,7 @@ jobs:
124124
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
125125

126126
- name: Restore Cache
127-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
127+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
128128
with:
129129
key: main
130130
path: '**'
@@ -146,7 +146,7 @@ jobs:
146146
run: make acceptance
147147

148148
- name: Upload coverage report
149-
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
149+
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
150150
with:
151151
files: ./coverage-acceptance.out
152152
flags: acceptance
@@ -158,7 +158,7 @@ jobs:
158158
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
159159

160160
- name: Restore Cache
161-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
161+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
162162
with:
163163
key: main
164164
path: '**'

.github/workflows/codeql.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747

4848
steps:
4949
- name: Harden Runner
50-
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
50+
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
5151
with:
5252
egress-policy: audit
5353
disable-telemetry: true
@@ -56,7 +56,7 @@ jobs:
5656
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5757

5858
- name: Restore Cache
59-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
59+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
6060
with:
6161
key: main
6262
path: '**'
@@ -74,12 +74,12 @@ jobs:
7474
(cd acceptance && go mod download)
7575
7676
- name: Initialize CodeQL
77-
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
77+
uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
7878
with:
7979
languages: ${{ matrix.language }}
8080

8181
- name: Autobuild
82-
uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
82+
uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
8383

8484
- name: Perform CodeQL Analysis
85-
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
85+
uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6

.github/workflows/lint.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: Harden Runner
44-
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
44+
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
4545
with:
4646
egress-policy: audit
4747
disable-telemetry: true
@@ -52,7 +52,7 @@ jobs:
5252
fetch-depth: 0
5353

5454
- name: Restore Cache
55-
uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
55+
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
5656
with:
5757
key: main
5858
path: '**'

.github/workflows/release.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ jobs:
8888
"${GITHUB_WORKSPACE}/hack/ubuntu-podman-update.sh"
8989
9090
- name: Cache
91-
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
91+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
9292
with:
9393
path: |
9494
~/.cache/go-build

.github/workflows/scorecard.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646

4747
steps:
4848
- name: Harden Runner
49-
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
49+
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
5050
with:
5151
egress-policy: audit
5252
disable-telemetry: true
@@ -75,6 +75,6 @@ jobs:
7575

7676
# Upload the results to GitHub's code scanning dashboard.
7777
- name: "Upload to code-scanning"
78-
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
78+
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6
7979
with:
8080
sarif_file: results.sarif

.github/workflows/update-go-containerregistry.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
steps:
3333
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434

35-
- uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
35+
- uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3636
with:
3737
key: main
3838
path: '**'
@@ -51,14 +51,14 @@ jobs:
5151
# https://github.com/golang/go/issues/45413
5252
GOPRIVATE: github.com/conforma/go-containerregistry
5353

54-
- uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
54+
- uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2
5555
id: generate-token
5656
with:
5757
app-id: ${{ vars.EC_AUTOMATION_APP_ID }}
5858
private-key: ${{ secrets.EC_AUTOMATION_KEY }}
5959

6060
- name: pull-request
61-
uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
61+
uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
6262
with:
6363
add-paths: |
6464
go.mod

.github/workflows/website.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
REPOSITORY: conforma/conforma.github.io
3939
steps:
4040
- name: Harden Runner
41-
uses: step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b # v2.15.0
41+
uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
4242
with:
4343
egress-policy: audit
4444
disable-telemetry: true

0 commit comments

Comments
 (0)