Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
release-assets.githubusercontent.com:443
- name: Checkout code
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: chainguard-dev/actions/setup-gitsign@f45211d3e8f9d2676c6b8cdd6a765435e06c819d
- uses: chainguard-dev/actions/setup-gitsign@de68b87302e6266db5fb5220246f8aa46fe94b67
- name: Set up Octo-STS
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
id: octo-sts
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -81,7 +81,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: SARIF file
path: results.sarif
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/style.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -91,7 +91,7 @@
run: |
yr --version
- name: Run yr fmt
run: |

Check warning on line 94 in .github/workflows/style.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2038:warning:1:1: Use 'find .. -print0 | xargs -0 ..' or 'find .. -exec .. +' to allow non-alphanumeric filenames [shellcheck] Raw Output: w:.github/workflows/style.yaml:94:9: shellcheck reported issue in this script: SC2038:warning:1:1: Use 'find .. -print0 | xargs -0 ..' or 'find .. -exec .. +' to allow non-alphanumeric filenames [shellcheck]
find rules -type f -name "*.yara" | xargs -n 1 -I {} yr fmt {}
if [[ -n $(git status -s) ]]; then
echo "Rule files updated; please run yr fmt locally and commit the changes"
Expand Down Expand Up @@ -132,7 +132,7 @@
go-version-file: go.mod
check-latest: true

- uses: chainguard-dev/actions/gofmt@f45211d3e8f9d2676c6b8cdd6a765435e06c819d # main
- uses: chainguard-dev/actions/gofmt@de68b87302e6266db5fb5220246f8aa46fe94b67 # main
with:
args: -s

Expand Down Expand Up @@ -170,7 +170,7 @@
go-version-file: go.mod
check-latest: true

- uses: chainguard-dev/actions/goimports@f45211d3e8f9d2676c6b8cdd6a765435e06c819d # main
- uses: chainguard-dev/actions/goimports@de68b87302e6266db5fb5220246f8aa46fe94b67 # main

golangci-lint:
name: golangci-lint
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/third-party.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@
jobs:
update:
if: ${{ github.repository == 'chainguard-dev/malcontent' }}
runs-on: ubuntu-latest-arm-16-core

Check failure on line 20 in .github/workflows/third-party.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 label "ubuntu-latest-arm-16-core" is unknown. available labels are "windows-latest", "windows-latest-8-cores", "windows-2025", "windows-2025-vs2026", "windows-2022", "windows-11-arm", "ubuntu-slim", "ubuntu-latest", "ubuntu-latest-4-cores", "ubuntu-latest-8-cores", "ubuntu-latest-16-cores", "ubuntu-24.04", "ubuntu-24.04-arm", "ubuntu-22.04", "ubuntu-22.04-arm", "macos-latest", "macos-latest-xlarge", "macos-latest-large", "macos-26-intel", "macos-26-xlarge", "macos-26-large", "macos-26", "macos-15-intel", "macos-15-xlarge", "macos-15-large", "macos-15", "macos-14-xlarge", "macos-14-large", "macos-14", "self-hosted", "x64", "arm", "arm64", "linux", "macos", "windows". if it is a custom label for self-hosted runner, set list of labels in actionlint.yaml config file [runner-label] Raw Output: e:.github/workflows/third-party.yaml:20:14: label "ubuntu-latest-arm-16-core" is unknown. available labels are "windows-latest", "windows-latest-8-cores", "windows-2025", "windows-2025-vs2026", "windows-2022", "windows-11-arm", "ubuntu-slim", "ubuntu-latest", "ubuntu-latest-4-cores", "ubuntu-latest-8-cores", "ubuntu-latest-16-cores", "ubuntu-24.04", "ubuntu-24.04-arm", "ubuntu-22.04", "ubuntu-22.04-arm", "macos-latest", "macos-latest-xlarge", "macos-latest-large", "macos-26-intel", "macos-26-xlarge", "macos-26-large", "macos-26", "macos-15-intel", "macos-15-xlarge", "macos-15-large", "macos-15", "macos-14-xlarge", "macos-14-large", "macos-14", "self-hosted", "x64", "arm", "arm64", "linux", "macos", "windows". if it is a custom label for self-hosted runner, set list of labels in actionlint.yaml config file [runner-label]
container:
image: cgr.dev/chainguard/wolfi-base:latest
options: >-
Expand Down Expand Up @@ -73,7 +73,7 @@
- name: Prepare samples
run: make samples

- uses: chainguard-dev/actions/setup-gitsign@f45211d3e8f9d2676c6b8cdd6a765435e06c819d
- uses: chainguard-dev/actions/setup-gitsign@de68b87302e6266db5fb5220246f8aa46fe94b67
- name: Set up Octo-STS
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
id: octo-sts
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/update-yara-x.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -113,7 +113,7 @@ jobs:
go-version-file: go.mod
check-latest: true

- uses: chainguard-dev/actions/setup-gitsign@f45211d3e8f9d2676c6b8cdd6a765435e06c819d
- uses: chainguard-dev/actions/setup-gitsign@de68b87302e6266db5fb5220246f8aa46fe94b67
- name: Set up Octo-STS
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
id: octo-sts
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/version.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@
release-assets.githubusercontent.com:443
tuf-repo-cdn.sigstore.dev:443
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: chainguard-dev/actions/setup-gitsign@f45211d3e8f9d2676c6b8cdd6a765435e06c819d
- uses: chainguard-dev/actions/setup-gitsign@de68b87302e6266db5fb5220246f8aa46fe94b67
- name: Set up Octo-STS
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
id: octo-sts
Expand All @@ -51,7 +51,7 @@
id: update
env:
UPDATE_TYPE: ${{ github.event.inputs.update }}
run: |

Check warning on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2086:info:18:54: Double quote to prevent globbing and word splitting [shellcheck] Raw Output: i:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2086:info:18:54: Double quote to prevent globbing and word splitting [shellcheck]

Check warning on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2086:info:18:34: Double quote to prevent globbing and word splitting [shellcheck] Raw Output: i:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2086:info:18:34: Double quote to prevent globbing and word splitting [shellcheck]

Check warning on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2086:info:15:33: Double quote to prevent globbing and word splitting [shellcheck] Raw Output: i:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2086:info:15:33: Double quote to prevent globbing and word splitting [shellcheck]

Check failure on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2004:style:18:77: $/${} is unnecessary on arithmetic variables [shellcheck] Raw Output: e:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2004:style:18:77: $/${} is unnecessary on arithmetic variables [shellcheck]

Check failure on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2004:style:15:56: $/${} is unnecessary on arithmetic variables [shellcheck] Raw Output: e:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2004:style:15:56: $/${} is unnecessary on arithmetic variables [shellcheck]

Check failure on line 54 in .github/workflows/version.yaml

View workflow job for this annotation

GitHub Actions / Action lint

[actionlint] reported by reviewdog 🐶 shellcheck reported issue in this script: SC2004:style:12:35: $/${} is unnecessary on arithmetic variables [shellcheck] Raw Output: e:.github/workflows/version.yaml:54:9: shellcheck reported issue in this script: SC2004:style:12:35: $/${} is unnecessary on arithmetic variables [shellcheck]
CURRENT_VERSION=$(awk -F'"' '/ID string =/ {print $2}' "${VERSION_FILE}")

if [[ ! "${CURRENT_VERSION}" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
Expand Down
Loading