@@ -41,21 +41,21 @@ jobs:
4141 # https://github.com/sigstore/cosign-installer
4242 - name : Install cosign
4343 if : github.event_name != 'pull_request'
44- uses : sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 # v3.1.1
44+ uses : sigstore/cosign-installer@v3.5.0
4545 with :
46- cosign-release : ' v2.1.1 '
46+ cosign-release : ' v2.2.4 '
4747
4848 # Set up BuildKit Docker container builder to be able to build
4949 # multi-platform images and export cache
5050 # https://github.com/docker/setup-buildx-action
5151 - name : Set up Docker Buildx
52- uses : docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0 .0
52+ uses : docker/setup-buildx-action@v3.3 .0
5353
5454 # Login against a Docker registry except on PR
5555 # https://github.com/docker/login-action
5656 - name : Log into registry ${{ env.REGISTRY }}
5757 if : github.event_name != 'pull_request'
58- uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0 .0
58+ uses : docker/login-action@v3.1 .0
5959 with :
6060 registry : ${{ env.REGISTRY }}
6161 username : ${{ github.actor }}
6565 # https://github.com/docker/metadata-action
6666 - name : Extract Docker metadata
6767 id : meta
68- uses : docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
68+ uses : docker/metadata-action@v5.5.1
6969 with :
7070 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
7171
7474 - name : Build and push Docker image with cache
7575 id : build-and-push
7676 if : github.event_name != 'schedule' && startsWith(github.ref, 'refs/tags/v') != true
77- uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0 .0
77+ uses : docker/build-push-action@v5.3 .0
7878 with :
7979 context : .
8080 push : ${{ github.event_name != 'pull_request' }}
8888 - name : Build and push without cache
8989 id : build-and-push-nocache
9090 if : github.event_name == 'schedule' || startsWith(github.ref, 'refs/tags/v') == true
91- uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0 .0
91+ uses : docker/build-push-action@v5.3 .0
9292 with :
9393 context : .
9494 push : ${{ github.event_name != 'pull_request' }}
0 commit comments