@@ -36,18 +36,17 @@ jobs:
36
36
# Install the cosign tool except on PR
37
37
# https://github.com/sigstore/cosign-installer
38
38
- name : Install cosign
39
- uses : sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 # v3.1.1
39
+ uses : sigstore/cosign-installer@v3.3.0
40
40
with :
41
41
cosign-release : ' v2.1.1'
42
42
43
- # Workaround: https://github.com/docker/build-push-action/issues/461
44
43
- name : Setup Docker buildx
45
- uses : docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf
44
+ uses : docker/setup-buildx-action@v3.0.0
46
45
47
46
# Login against a Docker registry except on PR
48
47
# https://github.com/docker/login-action
49
48
- name : Log into registry ${{ env.REGISTRY }}
50
- uses : docker/login-action@28218f9b04b4f3f62068d7b6ce6ca5b26e35336c
49
+ uses : docker/login-action@v3.0.0
51
50
with :
52
51
registry : ${{ env.REGISTRY }}
53
52
username : ${{ github.actor }}
57
56
# https://github.com/docker/build-push-action
58
57
- name : Build test image
59
58
id : build-test
60
- uses : docker/build-push-action@94d76d3bc1409736cb5dc1ada9502bec3a72973c
59
+ uses : docker/build-push-action@v5.1.0
61
60
with :
62
61
context : .
63
62
load : true
74
73
# https://github.com/docker/metadata-action
75
74
- name : Extract Docker metadata
76
75
id : meta
77
- uses : docker/metadata-action@v4
76
+ uses : docker/metadata-action@v5.5.0
78
77
with :
79
78
# list of Docker images to use as base name for tags
80
79
images : |
89
88
# https://github.com/docker/build-push-action
90
89
- name : Build and push production image
91
90
id : build-and-push
92
- uses : docker/build-push-action@94d76d3bc1409736cb5dc1ada9502bec3a72973c
91
+ uses : docker/build-push-action@v5.1.0
93
92
with :
94
93
context : .
95
94
target : http_app
0 commit comments