Skip to content

Commit 6e05930

Browse files
openshift-merge-bot[bot]openshift-merge-bot[bot]
authored
Merge pull request #1656 from kubeflow/main
[pull] main from kubeflow:main
2 parents fcfb652 + eb195a5 commit 6e05930

File tree

133 files changed

+3748
-1048
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

133 files changed

+3748
-1048
lines changed

‎.github/workflows/async-upload-test.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -39,9 +39,9 @@ jobs:
3939
run:
4040
working-directory: jobs/async-upload
4141
steps:
42-
- uses: actions/checkout@v6
42+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4343
- name: Set up Python
44-
uses: actions/setup-python@v6
44+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
4545
with:
4646
python-version: "3.11" # refers to the Container image
4747
- name: Install Poetry
@@ -62,9 +62,9 @@ jobs:
6262
run:
6363
working-directory: jobs/async-upload
6464
steps:
65-
- uses: actions/checkout@v6
65+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
6666
- name: Set up Python
67-
uses: actions/setup-python@v6
67+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
6868
with:
6969
python-version: "3.11" # refers to the Container image
7070
- name: Install Poetry
@@ -81,11 +81,11 @@ jobs:
8181
working-directory: jobs/async-upload
8282
steps:
8383
- name: Check out the repository
84-
uses: actions/checkout@v6
84+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
8585
with:
8686
fetch-depth: 0
8787
- name: Set up Python
88-
uses: actions/setup-python@v6
88+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
8989
with:
9090
python-version: "3.11"
9191
- name: Install Poetry

‎.github/workflows/build-and-push-async-upload.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -32,16 +32,16 @@ jobs:
3232
id-token: write # cosign
3333
steps:
3434
- name: Checkout repository
35-
uses: actions/checkout@v6
35+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3636

3737
- name: Set up QEMU
38-
uses: docker/setup-qemu-action@v4
38+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
3939

4040
- name: Set up Docker Buildx
41-
uses: docker/setup-buildx-action@v4
41+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
4242

4343
- name: Log in to the Container registry
44-
uses: docker/login-action@v4
44+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
4545
with:
4646
registry: ${{ env.IMG_REGISTRY }}
4747
username: ${{ env.REGISTRY_USER }}
@@ -61,7 +61,7 @@ jobs:
6161
6262
- name: Extract metadata (tags, labels) for Docker
6363
id: meta
64-
uses: docker/metadata-action@v5
64+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
6565
with:
6666
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_NAME }}"
6767
tags: |
@@ -71,7 +71,7 @@ jobs:
7171
7272
- name: Build and push Docker image
7373
id: build-push
74-
uses: docker/build-push-action@v7
74+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
7575
with:
7676
context: ./jobs/async-upload
7777
platforms: ${{ env.PLATFORMS }}
@@ -83,14 +83,14 @@ jobs:
8383
provenance: mode=max
8484

8585
- name: Install Cosign
86-
uses: sigstore/cosign-installer@v3
86+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
8787

8888
- name: Sign image with cosign
8989
run: |
9090
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_NAME }}@${{ steps.build-push.outputs.digest }}"
9191
9292
- name: Generate SBOM
93-
uses: anchore/sbom-action@v0
93+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
9494
with:
9595
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_NAME }}@${{ steps.build-push.outputs.digest }}"
9696
format: spdx-json # default, but making sure of the format

‎.github/workflows/build-and-push-controller-image.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -41,11 +41,11 @@ jobs:
4141
if: github.head_ref == '' && github.ref == 'refs/heads/main'
4242
run: echo "BUILD_CONTEXT=main" >> $GITHUB_ENV
4343
# checkout branch
44-
- uses: actions/checkout@v6
44+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4545
- name: Set up QEMU
46-
uses: docker/setup-qemu-action@v4
46+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
4747
- name: Set up Docker Buildx
48-
uses: docker/setup-buildx-action@v4
48+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
4949
# set image version
5050
- name: Set main-branch environment
5151
if: env.BUILD_CONTEXT == 'main'
@@ -59,14 +59,14 @@ jobs:
5959
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
6060
# docker login
6161
- name: Log in to the Container registry
62-
uses: docker/login-action@v4
62+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
6363
with:
6464
registry: ${{ env.IMG_REGISTRY }}
6565
username: ${{ env.DOCKER_USER }}
6666
password: ${{ env.DOCKER_PWD }}
6767
- name: Extract metadata (tags, labels) for Docker
6868
id: meta
69-
uses: docker/metadata-action@v5
69+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
7070
with:
7171
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}"
7272
tags: |
@@ -75,7 +75,7 @@ jobs:
7575
type=raw,value=main,enable=${{ env.BUILD_CONTEXT == 'main' }}
7676
- name: Build and push Docker image
7777
id: build-push
78-
uses: docker/build-push-action@v7
78+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
7979
with:
8080
context: .
8181
file: ./cmd/controller/Dockerfile.controller
@@ -87,12 +87,12 @@ jobs:
8787
cache-to: type=gha,mode=max
8888
provenance: mode=max
8989
- name: Install Cosign
90-
uses: sigstore/cosign-installer@v3
90+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
9191
- name: Sign image with cosign
9292
run: |
9393
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9494
- name: Generate SBOM
95-
uses: anchore/sbom-action@v0
95+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
9696
with:
9797
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9898
format: spdx-json # default, but making sure of the format

‎.github/workflows/build-and-push-csi-image.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -39,11 +39,11 @@ jobs:
3939
if: github.head_ref == '' && github.ref == 'refs/heads/main'
4040
run: echo "BUILD_CONTEXT=main" >> $GITHUB_ENV
4141
# checkout branch
42-
- uses: actions/checkout@v6
42+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4343
- name: Set up QEMU
44-
uses: docker/setup-qemu-action@v4
44+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
4545
- name: Set up Docker Buildx
46-
uses: docker/setup-buildx-action@v4
46+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
4747
# set image version
4848
- name: Set main-branch environment
4949
if: env.BUILD_CONTEXT == 'main'
@@ -57,14 +57,14 @@ jobs:
5757
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
5858
# docker login
5959
- name: Log in to the Container registry
60-
uses: docker/login-action@v4
60+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
6161
with:
6262
registry: ${{ env.IMG_REGISTRY }}
6363
username: ${{ env.DOCKER_USER }}
6464
password: ${{ env.DOCKER_PWD }}
6565
- name: Extract metadata (tags, labels) for Docker
6666
id: meta
67-
uses: docker/metadata-action@v5
67+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
6868
with:
6969
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}"
7070
tags: |
@@ -73,7 +73,7 @@ jobs:
7373
type=raw,value=main,enable=${{ env.BUILD_CONTEXT == 'main' }}
7474
- name: Build and push Docker image
7575
id: build-push
76-
uses: docker/build-push-action@v7
76+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
7777
with:
7878
context: .
7979
file: ./cmd/csi/Dockerfile.csi
@@ -85,12 +85,12 @@ jobs:
8585
cache-to: type=gha,mode=max
8686
provenance: mode=max
8787
- name: Install Cosign
88-
uses: sigstore/cosign-installer@v3
88+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
8989
- name: Sign image with cosign
9090
run: |
9191
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9292
- name: Generate SBOM
93-
uses: anchore/sbom-action@v0
93+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
9494
with:
9595
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9696
format: spdx-json # default, but making sure of the format

‎.github/workflows/build-and-push-image.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -42,13 +42,13 @@ jobs:
4242
if: github.head_ref == '' && github.ref == 'refs/heads/main'
4343
run: echo "BUILD_CONTEXT=main" >> $GITHUB_ENV
4444
# checkout branch
45-
- uses: actions/checkout@v6
45+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4646
# Set up QEMU for multi-architecture builds
4747
- name: Set up QEMU
48-
uses: docker/setup-qemu-action@v4
48+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
4949
# Set up Docker Buildx
5050
- name: Set up Docker Buildx
51-
uses: docker/setup-buildx-action@v4
51+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
5252
# set image version
5353
- name: Set main-branch environment
5454
if: env.BUILD_CONTEXT == 'main'
@@ -61,14 +61,14 @@ jobs:
6161
run: |
6262
echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
6363
- name: Log in to the Container registry
64-
uses: docker/login-action@v4
64+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
6565
with:
6666
registry: ${{ env.IMG_REGISTRY }}
6767
username: ${{ env.DOCKER_USER }}
6868
password: ${{ env.DOCKER_PWD }}
6969
- name: Extract metadata (tags, labels) for Docker
7070
id: meta
71-
uses: docker/metadata-action@v5
71+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
7272
with:
7373
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}"
7474
tags: |
@@ -77,7 +77,7 @@ jobs:
7777
type=raw,value=main,enable=${{ env.BUILD_CONTEXT == 'main' }}
7878
- name: Build and push Docker image
7979
id: build-push
80-
uses: docker/build-push-action@v7
80+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
8181
with:
8282
context: .
8383
platforms: ${{ env.PLATFORMS }}
@@ -88,12 +88,12 @@ jobs:
8888
cache-to: type=gha,mode=max
8989
provenance: mode=max
9090
- name: Install Cosign
91-
uses: sigstore/cosign-installer@v3
91+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
9292
- name: Sign image with cosign
9393
run: |
9494
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9595
- name: Generate SBOM
96-
uses: anchore/sbom-action@v0
96+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
9797
with:
9898
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
9999
format: spdx-json # default, but making sure of the format

‎.github/workflows/build-and-push-ui-images-standalone.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -31,16 +31,16 @@ jobs:
3131
id-token: write # cosign
3232
steps:
3333
- name: Checkout repository
34-
uses: actions/checkout@v6
34+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3535

3636
- name: Set up QEMU
37-
uses: docker/setup-qemu-action@v4
37+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
3838

3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@v4
40+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
4141

4242
- name: Log in to the Container registry
43-
uses: docker/login-action@v4
43+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
4444
with:
4545
registry: ${{ env.IMG_REGISTRY }}
4646
username: ${{ env.DOCKER_USER }}
@@ -60,7 +60,7 @@ jobs:
6060
6161
- name: Extract metadata (tags, labels) for Docker
6262
id: meta
63-
uses: docker/metadata-action@v5
63+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
6464
with:
6565
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}"
6666
tags: |
@@ -74,7 +74,7 @@ jobs:
7474
7575
- name: Build and push Docker image
7676
id: build-push
77-
uses: docker/build-push-action@v7
77+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
7878
with:
7979
context: ./clients/ui
8080
file: ./clients/ui/Dockerfile.standalone
@@ -91,14 +91,14 @@ jobs:
9191
provenance: mode=max
9292

9393
- name: Install Cosign
94-
uses: sigstore/cosign-installer@v3
94+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
9595

9696
- name: Sign image with cosign
9797
run: |
9898
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}@${{ steps.build-push.outputs.digest }}"
9999
100100
- name: Generate SBOM
101-
uses: anchore/sbom-action@v0
101+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
102102
with:
103103
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}@${{ steps.build-push.outputs.digest }}"
104104
format: spdx-json # default, but making sure of the format

‎.github/workflows/build-and-push-ui-images.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -31,16 +31,16 @@ jobs:
3131
id-token: write # cosign
3232
steps:
3333
- name: Checkout repository
34-
uses: actions/checkout@v6
34+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3535

3636
- name: Set up QEMU
37-
uses: docker/setup-qemu-action@v4
37+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
3838

3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@v4
40+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
4141

4242
- name: Log in to the Container registry
43-
uses: docker/login-action@v4
43+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
4444
with:
4545
registry: ${{ env.IMG_REGISTRY }}
4646
username: ${{ env.DOCKER_USER }}
@@ -60,7 +60,7 @@ jobs:
6060
6161
- name: Extract metadata (tags, labels) for Docker
6262
id: meta
63-
uses: docker/metadata-action@v5
63+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
6464
with:
6565
images: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}"
6666
tags: |
@@ -74,7 +74,7 @@ jobs:
7474
7575
- name: Build and push Docker image
7676
id: build-push
77-
uses: docker/build-push-action@v7
77+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
7878
with:
7979
context: ./clients/ui
8080
platforms: ${{ env.PLATFORMS }}
@@ -89,14 +89,14 @@ jobs:
8989
provenance: mode=max
9090

9191
- name: Install Cosign
92-
uses: sigstore/cosign-installer@v3
92+
uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3
9393

9494
- name: Sign image with cosign
9595
run: |
9696
cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}@${{ steps.build-push.outputs.digest }}"
9797
9898
- name: Generate SBOM
99-
uses: anchore/sbom-action@v0
99+
uses: anchore/sbom-action@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0
100100
with:
101101
image: "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_UI_REPO }}@${{ steps.build-push.outputs.digest }}"
102102
format: spdx-json # default, but making sure of the format

0 commit comments

Comments
 (0)