@@ -23,27 +23,24 @@ jobs:
23
23
24
24
steps :
25
25
- name : Checkout repository
26
- uses : actions/checkout@v3
26
+ uses : actions/checkout@v4
27
27
28
28
# Install the cosign tool except on PR
29
29
# https://github.com/sigstore/cosign-installer
30
30
- name : Install cosign
31
31
if : github.event_name != 'pull_request'
32
-
33
- with :
34
- cosign-release : ' v1.13.1'
35
-
32
+ uses : sigstore/cosign-installer@v3
36
33
37
34
# Workaround: https://github.com/docker/build-push-action/issues/461
38
35
- name : Setup Docker buildx
39
- uses : docker/setup-buildx-action@v2.5.0
40
- - uses : docker/setup-qemu-action@v2
36
+ uses : docker/setup-buildx-action@v3
37
+ - uses : docker/setup-qemu-action@v3
41
38
42
39
# Login against a Docker registry except on PR
43
40
# https://github.com/docker/login-action
44
41
- name : Log into registry ${{ env.REGISTRY }}
45
42
if : github.event_name != 'pull_request'
46
- uses : docker/login-action@v2.1.0
43
+ uses : docker/login-action@v3
47
44
with :
48
45
registry : ${{ env.REGISTRY }}
49
46
username : ${{ github.actor }}
@@ -53,15 +50,15 @@ jobs:
53
50
# https://github.com/docker/metadata-action
54
51
- name : Extract Docker metadata
55
52
id : meta
56
- uses : docker/metadata-action@v4.4.0
53
+ uses : docker/metadata-action@v5
57
54
with :
58
55
images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
59
56
60
57
# Build and push Docker image with Buildx (don't push on PR)
61
58
# https://github.com/docker/build-push-action
62
59
- name : Build and push Docker image
63
60
id : build-and-push
64
- uses : docker/build-push-action@v4.0.0
61
+ uses : docker/build-push-action@v5
65
62
with :
66
63
context : .
67
64
platforms : linux/amd64,linux/arm64
83
80
COSIGN_EXPERIMENTAL : " true"
84
81
# This step uses the identity token to provision an ephemeral certificate
85
82
# against the sigstore community Fulcio instance.
86
- run : echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}
83
+ run : echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}
0 commit comments