Skip to content

Commit 4582dfa

Browse files
authored
Update CI versions
1 parent 9fef534 commit 4582dfa

File tree

1 file changed

+8
-11
lines changed

1 file changed

+8
-11
lines changed

.github/workflows/ci.yml

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,27 +23,24 @@ jobs:
2323

2424
steps:
2525
- name: Checkout repository
26-
uses: actions/checkout@v3
26+
uses: actions/checkout@v4
2727

2828
# Install the cosign tool except on PR
2929
# https://github.com/sigstore/cosign-installer
3030
- name: Install cosign
3131
if: github.event_name != 'pull_request'
32-
uses: sigstore/[email protected]
33-
with:
34-
cosign-release: 'v1.13.1'
35-
32+
uses: sigstore/cosign-installer@v3
3633

3734
# Workaround: https://github.com/docker/build-push-action/issues/461
3835
- name: Setup Docker buildx
39-
uses: docker/setup-buildx-action@v2.5.0
40-
- uses: docker/setup-qemu-action@v2
36+
uses: docker/setup-buildx-action@v3
37+
- uses: docker/setup-qemu-action@v3
4138

4239
# Login against a Docker registry except on PR
4340
# https://github.com/docker/login-action
4441
- name: Log into registry ${{ env.REGISTRY }}
4542
if: github.event_name != 'pull_request'
46-
uses: docker/login-action@v2.1.0
43+
uses: docker/login-action@v3
4744
with:
4845
registry: ${{ env.REGISTRY }}
4946
username: ${{ github.actor }}
@@ -53,15 +50,15 @@ jobs:
5350
# https://github.com/docker/metadata-action
5451
- name: Extract Docker metadata
5552
id: meta
56-
uses: docker/metadata-action@v4.4.0
53+
uses: docker/metadata-action@v5
5754
with:
5855
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
5956

6057
# Build and push Docker image with Buildx (don't push on PR)
6158
# https://github.com/docker/build-push-action
6259
- name: Build and push Docker image
6360
id: build-and-push
64-
uses: docker/build-push-action@v4.0.0
61+
uses: docker/build-push-action@v5
6562
with:
6663
context: .
6764
platforms: linux/amd64,linux/arm64
@@ -83,4 +80,4 @@ jobs:
8380
COSIGN_EXPERIMENTAL: "true"
8481
# This step uses the identity token to provision an ephemeral certificate
8582
# against the sigstore community Fulcio instance.
86-
run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}
83+
run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}

0 commit comments

Comments
 (0)