@@ -135,7 +135,7 @@ jobs:
135135 DOCKER_METADATA_ANNOTATIONS_LEVELS : manifest,index
136136
137137 - name : Create/Update Draft
138- uses : lucacome/draft-release@38def8b74645796e9743b53e0f187d4a8915ea3e # v1.2.3
138+ uses : lucacome/draft-release@00f74370c044c322da6cb52acc707d62c7762c71 # v1.2.4
139139 with :
140140 minor-label : " enhancement"
141141 major-label : " change"
@@ -155,11 +155,11 @@ jobs:
155155 if : github.event_name != 'pull_request'
156156
157157 - name : Download Syft
158- uses : anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9 # v0.20.1
158+ uses : anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # v0.20.4
159159 if : github.ref_type == 'tag'
160160
161161 - name : Install Cosign
162- uses : sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
162+ uses : sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
163163 if : github.ref_type == 'tag'
164164
165165 - name : Setup Snapcraft
@@ -178,7 +178,7 @@ jobs:
178178 - name : Run GoReleaser
179179 uses : goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6.3.0
180180 with :
181- version : v2.10 .2 # renovate: datasource=github-tags depName=goreleaser/goreleaser
181+ version : v2.11 .2 # renovate: datasource=github-tags depName=goreleaser/goreleaser
182182 args : ${{ github.ref_type == 'tag' && 'release' || 'build --snapshot' }} --clean
183183 env :
184184 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
@@ -207,7 +207,7 @@ jobs:
207207 sbom : true
208208
209209 - name : Scan image
210- uses : anchore/scan-action@be7a22da4f22dde446c4c4c099887ff5b256526c # v6.3.0
210+ uses : anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e # v6.5.1
211211 id : scan
212212 continue-on-error : true
213213 with :
@@ -216,7 +216,7 @@ jobs:
216216 add-cpes-if-none : true
217217
218218 - name : Upload scan result to GitHub Security tab
219- uses : github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
219+ uses : github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
220220 continue-on-error : true
221221 with :
222222 sarif_file : ${{ steps.scan.outputs.sarif }}
0 commit comments