|
59 | 59 | environment: Prod (Readonly) |
60 | 60 | steps: |
61 | 61 | - name: Configure AWS Credentials |
62 | | - uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1 |
| 62 | + uses: aws-actions/configure-aws-credentials@0eb446ecb2e3f0e1a19f106e12e76c6a98b6bdb2 # v4.3.0 |
63 | 63 | with: |
64 | 64 | role-to-assume: ${{ secrets.AWS_IAM_ROLE }} |
65 | 65 | aws-region: us-east-1 |
@@ -104,19 +104,19 @@ jobs: |
104 | 104 | environment: GovCloud ${{ inputs.environment }} (East) |
105 | 105 | steps: |
106 | 106 | - name: Download Zip |
107 | | - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 |
| 107 | + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 |
108 | 108 | with: |
109 | 109 | name: ${{ matrix.layer }}_${{ matrix.arch }}.zip |
110 | 110 | - name: Download Metadata |
111 | | - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 |
| 111 | + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 |
112 | 112 | with: |
113 | 113 | name: ${{ matrix.layer }}_${{ matrix.arch }}.json |
114 | 114 | - name: Verify Layer Signature |
115 | 115 | run: | |
116 | 116 | SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json') |
117 | 117 | test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1 |
118 | 118 | - name: Configure AWS Credentials |
119 | | - uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1 |
| 119 | + uses: aws-actions/configure-aws-credentials@0eb446ecb2e3f0e1a19f106e12e76c6a98b6bdb2 # v4.3.0 |
120 | 120 | with: |
121 | 121 | role-to-assume: ${{ secrets.AWS_IAM_ROLE }} |
122 | 122 | aws-region: us-gov-east-1 |
@@ -173,19 +173,19 @@ jobs: |
173 | 173 | name: GovCloud ${{ inputs.environment }} (West) |
174 | 174 | steps: |
175 | 175 | - name: Download Zip |
176 | | - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 |
| 176 | + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 |
177 | 177 | with: |
178 | 178 | name: ${{ matrix.layer }}_${{ matrix.arch }}.zip |
179 | 179 | - name: Download Metadata |
180 | | - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 |
| 180 | + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 |
181 | 181 | with: |
182 | 182 | name: ${{ matrix.layer }}_${{ matrix.arch }}.json |
183 | 183 | - name: Verify Layer Signature |
184 | 184 | run: | |
185 | 185 | SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json') |
186 | 186 | test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1 |
187 | 187 | - name: Configure AWS Credentials |
188 | | - uses: aws-actions/configure-aws-credentials@b47578312673ae6fa5b5096b330d9fbac3d116df # v4.2.1 |
| 188 | + uses: aws-actions/configure-aws-credentials@0eb446ecb2e3f0e1a19f106e12e76c6a98b6bdb2 # v4.3.0 |
189 | 189 | with: |
190 | 190 | role-to-assume: ${{ secrets.AWS_IAM_ROLE }} |
191 | 191 | aws-region: us-gov-west-1 |
|
0 commit comments