Skip to content

Commit 6acebc0

Browse files
chore(deps): bump the gh-actions-packages group with 4 updates
Bumps the gh-actions-packages group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) and [gautamkrishnar/keepalive-workflow](https://github.com/gautamkrishnar/keepalive-workflow). Updates `actions/checkout` from 3.6.0 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3.6.0...11bd719) Updates `docker/setup-buildx-action` from 3.6.1 to 3.8.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@988b5a0...6524bf6) Updates `aquasecurity/trivy-action` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@915b19b...18f2510) Updates `gautamkrishnar/keepalive-workflow` from 2.0.6 to 2.0.8 - [Release notes](https://github.com/gautamkrishnar/keepalive-workflow/releases) - [Commits](gautamkrishnar/keepalive-workflow@24ba73b...995aec6) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages - dependency-name: gautamkrishnar/keepalive-workflow dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <[email protected]>
1 parent 51e5b8b commit 6acebc0

File tree

3 files changed

+8
-8
lines changed

3 files changed

+8
-8
lines changed

.github/workflows/ci.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,10 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Checkout repository
25-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # 4.1.7
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
2626
- name: Set up Docker Buildx
2727
id: buildx
28-
uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # 3.6.1
28+
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # 3.8.0
2929
- name: Login to ghcr.io
3030
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # 3.3.0
3131
with:
@@ -46,7 +46,7 @@ jobs:
4646
- name: Push images
4747
run: ./build --push
4848
- name: Run Trivy vulnerability scanner
49-
uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
49+
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
5050
with:
5151
image-ref: '${{ steps.build.outputs.LATEST_IMAGE_TAG }}'
5252
format: 'sarif'
@@ -70,6 +70,6 @@ jobs:
7070
runs-on: ubuntu-latest
7171
steps:
7272
- name: Checkout repository
73-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # 4.1.7
73+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
7474
- name: Keep workflow alive
75-
uses: gautamkrishnar/keepalive-workflow@24ba73b43d5ea8d2b3d56fb9b8de951ba9a3dd18 # v2.0.6
75+
uses: gautamkrishnar/keepalive-workflow@995aec69bb3f2b45b20f4e107907992c8715086d # v2.0.8

.github/workflows/docker-tag.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
packages: write
1515
steps:
1616
- name: Checkout repository
17-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # 4.1.7
17+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2
1818
- name: Login to ghcr.io
1919
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # 3.3.0
2020
with:

.github/workflows/vuln-check.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,15 +22,15 @@ jobs:
2222
runs-on: "ubuntu-20.04"
2323
steps:
2424
- name: Checkout code
25-
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2626

2727
- name: Free Disk Space (Ubuntu) # Reclaim disk space for scan
2828
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
2929
with:
3030
docker-images: false # Do not remove locally built images (including trivy scanner)
3131

3232
- name: Run Trivy vulnerability scanner
33-
uses: aquasecurity/trivy-action@915b19bbe73b92a6cf82a1bc12b087c9a19a5fe2 # v0.28.0
33+
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
3434
with:
3535
image-ref: 'ghcr.io/datadog/dd-trace-java-docker-build:latest'
3636
format: 'sarif'

0 commit comments

Comments
 (0)