Skip to content

Commit d817ce1

Browse files
renovate[bot]renovate[bot]
authored
Update github actions
1 parent 38559db commit d817ce1

File tree

7 files changed

+32
-32
lines changed

7 files changed

+32
-32
lines changed

‎.github/workflows/checks.yaml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -37,13 +37,13 @@ jobs:
3737
runs-on: ubuntu-latest
3838
steps:
3939
- name: Harden Runner
40-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
40+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4141
with:
4242
egress-policy: audit
4343
disable-telemetry: true
4444

4545
- name: Checkout repository
46-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
46+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
4747
with:
4848
# Needed in hack/derive-version.sh
4949
fetch-depth: 0
@@ -55,7 +55,7 @@ jobs:
5555
path: '**'
5656

5757
- name: Setup Go environment
58-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
58+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
5959
with:
6060
go-version-file: go.mod
6161
cache: false
@@ -79,23 +79,23 @@ jobs:
7979
run: make test
8080

8181
- name: Upload unit test coverage report
82-
uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
82+
uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
8383
env:
8484
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
8585
with:
8686
files: ./coverage-unit.out
8787
flags: unit
8888

8989
- name: Upload generative test coverage report
90-
uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
90+
uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
9191
env:
9292
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
9393
with:
9494
files: ./coverage-generative.out
9595
flags: generative
9696

9797
- name: Upload integration test coverage report
98-
uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
98+
uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
9999
env:
100100
CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
101101
with:
@@ -114,7 +114,7 @@ jobs:
114114
# disable-telemetry: true
115115

116116
- name: Checkout repository
117-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
117+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
118118

119119
- name: Restore Cache
120120
uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
@@ -123,7 +123,7 @@ jobs:
123123
path: '**'
124124

125125
- name: Setup Go environment
126-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
126+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
127127
with:
128128
go-version-file: go.mod
129129
cache: false
@@ -136,7 +136,7 @@ jobs:
136136
run: make acceptance
137137

138138
- name: Upload coverage report
139-
uses: codecov/codecov-action@18283e04ce6e62d37312384ff67231eb8fd56d24 # v5.4.3
139+
uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
140140
with:
141141
files: ./coverage-acceptance.out
142142
flags: acceptance
@@ -145,7 +145,7 @@ jobs:
145145
runs-on: ubuntu-latest
146146
steps:
147147
- name: Checkout repository
148-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
148+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
149149

150150
- name: Restore Cache
151151
uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
@@ -154,7 +154,7 @@ jobs:
154154
path: '**'
155155

156156
- name: Setup Go environment
157-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
157+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
158158
with:
159159
go-version-file: go.mod
160160
cache: false

‎.github/workflows/codeql.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -47,13 +47,13 @@ jobs:
4747

4848
steps:
4949
- name: Harden Runner
50-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
50+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
5151
with:
5252
egress-policy: audit
5353
disable-telemetry: true
5454

5555
- name: Checkout repository
56-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
56+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5757

5858
- name: Restore Cache
5959
uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
@@ -62,7 +62,7 @@ jobs:
6262
path: '**'
6363

6464
- name: Setup Go environment
65-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
65+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
6666
with:
6767
go-version-file: go.mod
6868
cache: false
@@ -74,12 +74,12 @@ jobs:
7474
(cd acceptance && go mod download)
7575
7676
- name: Initialize CodeQL
77-
uses: github/codeql-action/init@5378192d256ef1302a6980fffe5ca04426d43091 # v3.28.21
77+
uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
7878
with:
7979
languages: ${{ matrix.language }}
8080

8181
- name: Autobuild
82-
uses: github/codeql-action/autobuild@5378192d256ef1302a6980fffe5ca04426d43091 # v3.28.21
82+
uses: github/codeql-action/autobuild@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
8383

8484
- name: Perform CodeQL Analysis
85-
uses: github/codeql-action/analyze@5378192d256ef1302a6980fffe5ca04426d43091 # v3.28.21
85+
uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0

‎.github/workflows/lint.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,13 +41,13 @@ jobs:
4141

4242
steps:
4343
- name: Harden Runner
44-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
44+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4545
with:
4646
egress-policy: audit
4747
disable-telemetry: true
4848

4949
- name: Checkout repository
50-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
50+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5151
with:
5252
fetch-depth: 0
5353

@@ -58,13 +58,13 @@ jobs:
5858
path: '**'
5959

6060
- name: Setup Go environment
61-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
61+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
6262
with:
6363
go-version-file: go.mod
6464
cache: false
6565

6666
- name: Setup Node.js environment
67-
uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
67+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
6868
with:
6969
node-version-file: 'package.json'
7070

‎.github/workflows/release.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ jobs:
7979
swap-storage: false
8080

8181
- name: Checkout repository
82-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
82+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
8383
with:
8484
fetch-depth: 0
8585

@@ -96,7 +96,7 @@ jobs:
9696
key: main
9797

9898
- name: Setup Go environment
99-
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
99+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
100100
with:
101101
go-version-file: go.mod
102102
cache: false
@@ -169,7 +169,7 @@ jobs:
169169
git push -f --tags
170170
171171
- name: Rolling release
172-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
172+
uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2
173173
with:
174174
make_latest: true
175175
name: Rolling release
@@ -179,7 +179,7 @@ jobs:
179179
files: dist/*
180180

181181
- name: Versioned release
182-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
182+
uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2
183183
with:
184184
make_latest: false
185185
name: ${{ steps.add_tags.outputs.tag_name }}

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -46,13 +46,13 @@ jobs:
4646

4747
steps:
4848
- name: Harden Runner
49-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
49+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
5050
with:
5151
egress-policy: audit
5252
disable-telemetry: true
5353

5454
- name: Checkout code
55-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
55+
uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5656
with:
5757
persist-credentials: false
5858

@@ -75,6 +75,6 @@ jobs:
7575

7676
# Upload the results to GitHub's code scanning dashboard.
7777
- name: "Upload to code-scanning"
78-
uses: github/codeql-action/upload-sarif@5378192d256ef1302a6980fffe5ca04426d43091 # v3.28.21
78+
uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
7979
with:
8080
sarif_file: results.sarif

‎.github/workflows/update-go-containerregistry.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,14 +30,14 @@ jobs:
3030
update:
3131
runs-on: ubuntu-latest
3232
steps:
33-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
33+
- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
3434

3535
- uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
3636
with:
3737
key: main
3838
path: '**'
3939

40-
- uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
40+
- uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
4141
with:
4242
go-version-file: go.mod
4343
cache: false
@@ -51,7 +51,7 @@ jobs:
5151
# https://github.com/golang/go/issues/45413
5252
GOPRIVATE: github.com/enterprise-contract/go-containerregistry
5353

54-
- uses: actions/create-github-app-token@af35edadc00be37caa72ed9f3e6d5f7801bfdf09 # v1.11.7
54+
- uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0
5555
id: generate-token
5656
with:
5757
app-id: ${{ vars.EC_AUTOMATION_APP_ID }}

‎.github/workflows/website.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
REPOSITORY: conforma/conforma.github.io
3939
steps:
4040
- name: Harden Runner
41-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
41+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4242
with:
4343
egress-policy: audit
4444
disable-telemetry: true

0 commit comments

Comments
 (0)