@@ -18,12 +18,12 @@ jobs:
1818 if : startsWith(github.event.inputs.release_tag, 'v')
1919 steps :
2020 - name : Harden the runner (Audit all outbound calls)
21- uses : step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
21+ uses : step-security/harden-runner@v2
2222 with :
2323 egress-policy : audit
2424
2525 - name : Checkout
26- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
26+ uses : actions/checkout@v5
2727 - name : Validate tag format
2828 run : |
2929 TAG=${{ github.event.inputs.release_tag }}
@@ -33,20 +33,20 @@ jobs:
3333 fi
3434 echo "✅ Valid semver tag: $TAG"
3535 - name : Log in to GitHub Container Registry
36- uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
36+ uses : docker/login-action@v3
3737 with :
3838 registry : ghcr.io
3939 username : ${{ github.actor }}
4040 password : ${{ secrets.GITHUB_TOKEN }}
4141
4242 - name : Set up QEMU for ARM builds
43- uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
43+ uses : docker/setup-qemu-action@v3
4444
4545 - name : Set up Docker Buildx
46- uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
46+ uses : docker/setup-buildx-action@v3
4747
4848 - name : Build and push Docker image
49- uses : docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
49+ uses : docker/build-push-action@v6
5050 with :
5151 context : .
5252 push : true
0 commit comments