Skip to content

Commit 5f0cfe2

Browse files
reactive-firewallreactive-firewall
committed
[UPDATE] Merge various CI-CD Version bumps
Changes in file .github/actions/checkout-and-rebuild/action.yml: * version bumps Changes in file .github/workflows/CD-PyPi.yml: * version bumps Changes in file .github/workflows/CI-BUILD.yml: * version bumps Changes in file .github/workflows/CI-CHGLOG.yml: * version bumps Changes in file .github/workflows/CI-DOCS.yml: * version bumps Changes in file .github/workflows/CI-MATs.yml: * version bumps Changes in file .github/workflows/Tests.yml: * version bumps Changes in file .github/workflows/bandit.yml: * version bumps Changes in file .github/workflows/codeql-analysis.yml: * version bumps Changes in file .github/workflows/flake8.yml: * version bumps Changes in file .github/workflows/makefile-lint.yml: * version bumps Changes in file .github/workflows/markdown-lint.yml: * version bumps Changes in file .github/workflows/scorecard.yml: * version bumps Changes in file .github/workflows/shellcheck.yml: * version bumps Changes in file .github/workflows/yaml-lint.yml: * version bumps
5 parents d20144f + a3d1a03 + a77ec93 + 04b7b3c + 5c8fd6d commit 5f0cfe2

File tree

15 files changed

+55
-53
lines changed

15 files changed

+55
-53
lines changed

‎.github/actions/checkout-and-rebuild/action.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ runs:
6262
using: composite
6363
steps:
6464
- name: Checkout repository
65-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
65+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6666
with:
6767
persist-credentials: false
6868
fetch-depth: 0
@@ -125,7 +125,7 @@ runs:
125125
- id: fetch_artifact_files
126126
name: "Fetch Build Files"
127127
if: ${{ (github.repository == 'reactive-firewall-org/multicast') && success() }}
128-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
128+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
129129
with:
130130
path: ${{ inputs.path }}/dist
131131
pattern: multicast-build-${{ steps.output_sha.outputs.sha }}

‎.github/workflows/CD-PyPi.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
build_status: ${{ steps.build.outcome }}
3838
steps:
3939
- name: Checkout repository
40-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
40+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4141
with:
4242
persist-credentials: false
4343
- id: build-python

‎.github/workflows/CI-BUILD.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
artifact-files: ${{ steps.buildfiles.outputs.files }}
5454
steps:
5555
- name: Checkout repository
56-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
56+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5757
with:
5858
persist-credentials: false
5959
- id: build-python
@@ -184,7 +184,7 @@ jobs:
184184
LC_ALL: ${{ matrix.lang-var }}
185185
steps:
186186
- name: Checkout repository
187-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
187+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
188188
with:
189189
persist-credentials: false
190190
- id: buildpy
@@ -255,7 +255,7 @@ jobs:
255255
build-artifact-attestation-id: ${{ steps.multicast-build-attest.outputs.attestation-id }}
256256
steps:
257257
- name: Download All Artifacts
258-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
258+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
259259
with:
260260
path: ${{ github.workspace }}/dist
261261
pattern: multicast-build-${{ github.sha }}
@@ -338,7 +338,7 @@ jobs:
338338
printf "%s\n" "build_id=${{ github.run_id }}" >> "$GITHUB_OUTPUT"
339339
cat <"$GITHUB_OUTPUT" >> "BUILD-info.txt"
340340
- name: Download All Artifacts
341-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
341+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
342342
with:
343343
path: ${{ github.workspace }}/dist
344344
pattern: multicast-build-${{ github.sha }}
@@ -414,7 +414,7 @@ jobs:
414414
- name: "Download Status Summary Artifact"
415415
id: download-build-summary
416416
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
417-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
417+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
418418
with:
419419
name: BUILD-COMMENT-BODY-${{ github.sha }}
420420
github-token: ${{ github.token }}

‎.github/workflows/CI-CHGLOG.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
fi
7474
- name: "Fetch Build Info"
7575
if: ${{ (github.repository == 'reactive-firewall-org/multicast') && success() }}
76-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
76+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
7777
with:
7878
path: "BUILD-info.txt"
7979
pattern: multicast-info-*
@@ -97,7 +97,7 @@ jobs:
9797
printf "chglog_url=%s\n" 'https://github.com/reactive-firewall-org/multicast/actions/runs/${{ github.run_id }}' >> "$GITHUB_OUTPUT"
9898
printf "chglog_id=%s\n" ${{ github.run_id }} >> "$GITHUB_OUTPUT"
9999
- name: Checkout repository
100-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
100+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
101101
with:
102102
persist-credentials: false
103103
ref: ${{ steps.load_build_info.outputs.build_sha }}
@@ -163,7 +163,7 @@ jobs:
163163
LANG: "en_US.utf-8"
164164
steps:
165165
- name: pre-checkout repository for actions
166-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
166+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
167167
with:
168168
persist-credentials: false
169169
ref: ${{ needs.check_build.outputs.sha }}
@@ -211,7 +211,7 @@ jobs:
211211
steps:
212212
- name: Download ChangeLog Artifact
213213
id: download
214-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
214+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
215215
with:
216216
path: '${{ runner.temp }}/'
217217
artifact-ids: ${{ needs.CHGLOG.outputs.artifact-id }}
@@ -265,7 +265,7 @@ jobs:
265265
retention-days: 2
266266
overwrite: true
267267
- name: Checkout repository actions for check
268-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
268+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
269269
with:
270270
persist-credentials: false
271271
ref: ${{ needs.check_build.outputs.sha }}
@@ -356,7 +356,7 @@ jobs:
356356
- name: "Download Status Summary Artifact"
357357
id: download-chglog-summary
358358
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
359-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
359+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
360360
with:
361361
name: chglog-COMMENT-BODY-${{ needs.check_build.outputs.sha }}
362362
github-token: ${{ github.token }}

‎.github/workflows/CI-DOCS.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ jobs:
7070
fi
7171
- name: "Fetch MATs Info"
7272
if: ${{ (github.repository == 'reactive-firewall-org/multicast') && success() }}
73-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
73+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
7474
with:
7575
path: "multicast-info.txt"
7676
pattern: multicast-info-*
@@ -94,7 +94,7 @@ jobs:
9494
printf "docs_url=%s\n" 'https://github.com/reactive-firewall-org/multicast/actions/runs/${{ github.run_id }}' >> "$GITHUB_OUTPUT"
9595
printf "docs_id=%s\n" ${{ github.run_id }} >> "$GITHUB_OUTPUT"
9696
- name: checkout repository actions for check
97-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
97+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9898
with:
9999
persist-credentials: false
100100
ref: ${{ steps.load_build_info.outputs.build_sha }}
@@ -150,7 +150,7 @@ jobs:
150150
docs_artifact_digest: ${{ steps.upload-documentation.outputs.artifact-digest }}
151151
steps:
152152
- name: pre-checkout repository for actions
153-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
153+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
154154
with:
155155
persist-credentials: false
156156
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -209,7 +209,7 @@ jobs:
209209
if: ${{ !cancelled() && (needs.check_mats.outputs.should_run == 'true') && (needs.DOCS.outputs.docs_outcome != 'cancelled') }}
210210
steps:
211211
- name: Download All Artifacts
212-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
212+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
213213
with:
214214
path: ${{ github.workspace }}/Multicast-Documentation
215215
pattern: Multicast-Documentation-${{ needs.check_mats.outputs.build_sha }}-*-*
@@ -256,7 +256,7 @@ jobs:
256256
compression-level: 9
257257
overwrite: true
258258
- name: checkout repository actions for check
259-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
259+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
260260
with:
261261
persist-credentials: false
262262
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -289,7 +289,7 @@ jobs:
289289
- name: "Download Status Summary Artifact"
290290
id: download-documentation-summary
291291
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
292-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
292+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
293293
with:
294294
name: DOCUMENTATION-COMMENT-BODY-${{ needs.check_mats.outputs.build_sha }}
295295
github-token: ${{ github.token }}

‎.github/workflows/CI-MATs.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -77,7 +77,7 @@ jobs:
7777
fi
7878
- name: "Fetch Build Info"
7979
if: ${{ (github.repository == 'reactive-firewall-org/multicast') && success() }}
80-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
80+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
8181
with:
8282
path: "BUILD-info.txt"
8383
pattern: multicast-info-*
@@ -101,7 +101,7 @@ jobs:
101101
printf "mats_url=%s\n" 'https://github.com/reactive-firewall-org/multicast/actions/runs/${{ github.run_id }}' >> "$GITHUB_OUTPUT"
102102
printf "mats_id=%s\n" ${{ github.run_id }} >> "$GITHUB_OUTPUT"
103103
- name: Checkout repository
104-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
104+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
105105
with:
106106
persist-credentials: false
107107
ref: ${{ steps.load_build_info.outputs.build_sha }}
@@ -171,7 +171,7 @@ jobs:
171171
LANG: "en_US.utf-8"
172172
steps:
173173
- name: pre-checkout repository for actions
174-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
174+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
175175
with:
176176
persist-credentials: false
177177
ref: ${{ needs.check_build.outputs.sha }}
@@ -211,7 +211,7 @@ jobs:
211211
build_sha: ${{ needs.check_build.outputs.sha }}
212212
steps:
213213
- name: Download All Artifacts
214-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
214+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
215215
with:
216216
path: ${{ github.workspace }}/MATS
217217
pattern: multicast-mats-${{ needs.check_build.outputs.sha }}-part-*
@@ -294,7 +294,7 @@ jobs:
294294
retention-days: 2
295295
overwrite: true
296296
- name: checkout repository actions for check
297-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
297+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
298298
with:
299299
persist-credentials: false
300300
ref: ${{ needs.check_build.outputs.sha }}
@@ -385,7 +385,7 @@ jobs:
385385
- name: "Download Status Summary Artifact"
386386
id: download-mats-summary
387387
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
388-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
388+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
389389
with:
390390
name: MATS-COMMENT-BODY-${{ needs.check_build.outputs.sha }}
391391
github-token: ${{ github.token }}

‎.github/workflows/Tests.yml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ jobs:
9494
fi
9595
- name: "Fetch MATs Info"
9696
if: ${{ (github.repository == 'reactive-firewall-org/multicast') && success() }}
97-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
97+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
9898
with:
9999
path: "multicast-info.txt"
100100
pattern: multicast-info-*
@@ -118,7 +118,7 @@ jobs:
118118
printf "tests_url=%s\n" 'https://github.com/reactive-firewall-org/multicast/actions/runs/${{ github.run_id }}' >> "$GITHUB_OUTPUT"
119119
printf "tests_id=%s\n" ${{ github.run_id }} >> "$GITHUB_OUTPUT"
120120
- name: checkout repository actions for check
121-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
121+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
122122
with:
123123
persist-credentials: false
124124
ref: ${{ steps.load_build_info.outputs.build_sha }}
@@ -178,7 +178,7 @@ jobs:
178178
coverage_artifact_digest: ${{ steps.upload-test-tools.outputs.coverage_artifact_digest }}
179179
steps:
180180
- name: pre-checkout repository for actions
181-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
181+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
182182
with:
183183
persist-credentials: false
184184
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -440,7 +440,7 @@ jobs:
440440
doctests_artifact_digest: ${{ steps.doctests-reports-upload.outputs.artifact-digest }}
441441
steps:
442442
- name: pre-checkout repository for actions
443-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
443+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
444444
with:
445445
persist-credentials: false
446446
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -644,7 +644,7 @@ jobs:
644644
if: ${{ !cancelled() && (needs.check_mats.outputs.should_run == 'true') && (needs.COVERAGE.outputs.coverage_outcome != 'cancelled') }}
645645
steps:
646646
- name: Download All Artifacts
647-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
647+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
648648
with:
649649
path: ${{ github.workspace }}/COVERAGE
650650
pattern: multicast-coverage-${{ needs.check_mats.outputs.build_sha }}-part-*
@@ -692,7 +692,7 @@ jobs:
692692
retention-days: 2
693693
overwrite: true
694694
- name: checkout repository actions for check
695-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
695+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
696696
with:
697697
persist-credentials: false
698698
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -709,7 +709,7 @@ jobs:
709709
- name: "Download Status Summary Artifact"
710710
id: download-coverage-summary
711711
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
712-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
712+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
713713
with:
714714
name: COVERAGE-COMMENT-BODY-${{ needs.check_mats.outputs.build_sha }}
715715
github-token: ${{ github.token }}
@@ -766,7 +766,7 @@ jobs:
766766
VCS_COMMIT_ID: ${{ needs.check_mats.outputs.build_sha }}
767767
steps:
768768
- name: pre-checkout repository for actions
769-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
769+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
770770
with:
771771
persist-credentials: false
772772
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -845,7 +845,7 @@ jobs:
845845
integration_artifact_digest: ${{ steps.integration-reports-upload.outputs.artifact-digest }}
846846
steps:
847847
- name: pre-checkout repository for actions
848-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
848+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
849849
with:
850850
persist-credentials: false
851851
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -1176,7 +1176,7 @@ jobs:
11761176
if: ${{ !cancelled() && (needs.check_mats.outputs.should_run == 'true') && (needs.INTEGRATION.outputs.integration_outcome != 'cancelled') }}
11771177
steps:
11781178
- name: Download All Artifacts
1179-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
1179+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
11801180
with:
11811181
path: ${{ github.workspace }}/EXTRAS
11821182
pattern: multicast-integration-${{ needs.check_mats.outputs.build_sha }}-part-*
@@ -1240,7 +1240,7 @@ jobs:
12401240
retention-days: 2
12411241
overwrite: true
12421242
- name: checkout repository actions for check
1243-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1243+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
12441244
with:
12451245
persist-credentials: false
12461246
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -1272,7 +1272,7 @@ jobs:
12721272
- name: "Download Status Summary Artifact"
12731273
id: download-integration-summary
12741274
if: ${{ !cancelled() && (github.repository == 'reactive-firewall-org/multicast') }}
1275-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
1275+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
12761276
with:
12771277
name: INTEGRATION-COMMENT-BODY-${{ needs.check_mats.outputs.build_sha }}
12781278
github-token: ${{ github.token }}
@@ -1313,7 +1313,7 @@ jobs:
13131313
LC_CTYPE: "en_US.utf-8"
13141314
steps:
13151315
- name: pre-checkout repository for actions
1316-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1316+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
13171317
with:
13181318
persist-credentials: false
13191319
ref: ${{ needs.check_mats.outputs.build_sha }}
@@ -1380,7 +1380,7 @@ jobs:
13801380

13811381
steps:
13821382
- name: pre-checkout repository for actions
1383-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1383+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
13841384
with:
13851385
persist-credentials: false
13861386
ref: ${{ needs.check_mats.outputs.build_sha }}

‎.github/workflows/bandit.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
runs-on: ubuntu-latest
3030
steps:
3131
- name: Checkout repository
32-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
32+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3333
with:
3434
persist-credentials: false
3535
- name: Bandit Scan

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -44,11 +44,13 @@ jobs:
4444

4545
steps:
4646
- name: Checkout repository
47-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
47+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
48+
with:
49+
persist-credentials: false
4850

4951
# Initializes the CodeQL tools for scanning.
5052
- name: Initialize CodeQL
51-
uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
53+
uses: github/codeql-action/init@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
5254
with:
5355
languages: ${{ matrix.language }}
5456
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -59,7 +61,7 @@ jobs:
5961
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6062
# If this step fails, then you should remove it and run the build manually (see below)
6163
- name: Autobuild
62-
uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
64+
uses: github/codeql-action/autobuild@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5
6365

6466
# ℹ️ Command-line programs to run using the OS shell.
6567
# 📚 https://git.io/JvXDl
@@ -73,4 +75,4 @@ jobs:
7375
# make release
7476

7577
- name: Perform CodeQL Analysis
76-
uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
78+
uses: github/codeql-action/analyze@76621b61decf072c1cee8dd1ce2d2a82d33c17ed # v3.29.5

0 commit comments

Comments
 (0)