Skip to content

Commit daed3b6

Browse files
ModeSevenIndustrialSolutionsModeSevenIndustrialSolutions
authored
Merge pull request #41 from ModeSevenIndustrialSolutions/update-workflows
CI: Update GitHub actions
2 parents 9c17790 + c9174b5 commit daed3b6

4 files changed

Lines changed: 42 additions & 42 deletions

File tree

‎.github/workflows/build-test-release.yaml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
timeout-minutes: 5
2525
steps:
2626
# yamllint disable-line rule:line-length
27-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
27+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2828
with:
2929
egress-policy: audit
3030

@@ -55,7 +55,7 @@ jobs:
5555
steps:
5656
# Harden the runner used by this workflow
5757
# yamllint disable-line rule:line-length
58-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
58+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
5959
with:
6060
egress-policy: 'audit'
6161

@@ -69,7 +69,7 @@ jobs:
6969
- name: 'Verify pushed tag'
7070
id: 'tag-validate'
7171
# yamllint disable-line rule:line-length
72-
uses: lfreleng-actions/tag-validate-action@67695fa3d045917ca7ecc0f1d5f0cad03e231104 # v1.0.1
72+
uses: lfreleng-actions/tag-validate-action@461d187a53b5de27b068c2cea5af972c085a4a6a # v1.0.2
7373
with:
7474
token: "${{ secrets.GITHUB_TOKEN }}"
7575
require_type: 'semver'
@@ -121,7 +121,7 @@ jobs:
121121
steps:
122122
# Harden the runner used by this workflow
123123
# yamllint disable-line rule:line-length
124-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
124+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
125125
with:
126126
egress-policy: 'audit'
127127

@@ -131,7 +131,7 @@ jobs:
131131
- name: 'Build Python project'
132132
id: 'python-build'
133133
# yamllint disable-line rule:line-length
134-
uses: lfreleng-actions/python-build-action@7ff456c72f1dd50ef212ea7222efc12693221af3 # v1.0.4
134+
uses: lfreleng-actions/python-build-action@9b637a301cebe3b7575269e5c3bf263350daf35d # v1.1.1
135135
with:
136136
sigstore_sign: true
137137
attestations: true
@@ -150,7 +150,7 @@ jobs:
150150
steps:
151151
# Harden the runner used by this workflow
152152
# yamllint disable-line rule:line-length
153-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
153+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
154154
with:
155155
egress-policy: 'audit'
156156

@@ -159,7 +159,7 @@ jobs:
159159

160160
- name: 'Test Python project [PYTEST]'
161161
# yamllint disable-line rule:line-length
162-
uses: lfreleng-actions/python-test-action@92d4110d44ebc18fa4575c6b00203ff67d01a1cb # v1.0.1
162+
uses: lfreleng-actions/python-test-action@aa753462f090101dcb0c4708e9499f55e276e373 # v1.1.2
163163
with:
164164
python_version: "${{ matrix.python-version }}"
165165

@@ -177,7 +177,7 @@ jobs:
177177
steps:
178178
# Harden the runner used by this workflow
179179
# yamllint disable-line rule:line-length
180-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
180+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
181181
with:
182182
egress-policy: 'audit'
183183

@@ -186,7 +186,7 @@ jobs:
186186

187187
- name: 'Audit Python project'
188188
# yamllint disable-line rule:line-length
189-
uses: lfreleng-actions/python-audit-action@1776538e768c52c55c3c96495f6e25f0762ad28f # v0.2.6
189+
uses: lfreleng-actions/python-audit-action@275c85f883b03f5342c1fafd8173b6d996670a1d # v0.2.7
190190
with:
191191
python_version: "${{ matrix.python-version }}"
192192

@@ -200,7 +200,7 @@ jobs:
200200
steps:
201201
# Harden the runner used by this workflow
202202
# yamllint disable-line rule:line-length
203-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
203+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
204204
with:
205205
egress-policy: 'audit'
206206

@@ -217,7 +217,7 @@ jobs:
217217

218218
- name: "Upload SBOM artifacts"
219219
# yamllint disable-line rule:line-length
220-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
220+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
221221
with:
222222
name: sbom-files
223223
path: |
@@ -254,7 +254,7 @@ jobs:
254254

255255
- name: "Upload Grype scan results"
256256
# yamllint disable-line rule:line-length
257-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
257+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
258258
if: always()
259259
with:
260260
name: grype-scan-results
@@ -310,13 +310,13 @@ jobs:
310310
steps:
311311
# Harden the runner used by this workflow
312312
# yamllint disable-line rule:line-length
313-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
313+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
314314
with:
315315
egress-policy: 'audit'
316316

317317
- name: 'Test PyPI publishing'
318318
# yamllint disable-line rule:line-length
319-
uses: lfreleng-actions/pypi-publish-action@f6a61d7d6f83b1279bc6599b84d2f0ecbbe359a2 # v0.1.5
319+
uses: lfreleng-actions/pypi-publish-action@f07400a2b57119f1ceac420f559803264b491f23 # v0.1.6
320320
with:
321321
environment: 'development'
322322
tag: "${{ needs.tag-validate.outputs.tag }}"
@@ -337,13 +337,13 @@ jobs:
337337
steps:
338338
# Harden the runner used by this workflow
339339
# yamllint disable-line rule:line-length
340-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
340+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
341341
with:
342342
egress-policy: 'audit'
343343

344344
- name: 'PyPI release'
345345
# yamllint disable-line rule:line-length
346-
uses: lfreleng-actions/pypi-publish-action@f6a61d7d6f83b1279bc6599b84d2f0ecbbe359a2 # v0.1.5
346+
uses: lfreleng-actions/pypi-publish-action@f07400a2b57119f1ceac420f559803264b491f23 # v0.1.6
347347
with:
348348
environment: 'production'
349349
attestations: true
@@ -368,7 +368,7 @@ jobs:
368368
steps:
369369
# Harden the runner used by this workflow
370370
# yamllint disable-line rule:line-length
371-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
371+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
372372
with:
373373
egress-policy: 'audit'
374374

@@ -405,7 +405,7 @@ jobs:
405405
steps:
406406
# Harden the runner used by this workflow
407407
# yamllint disable-line rule:line-length
408-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
408+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
409409
with:
410410
egress-policy: 'audit'
411411

@@ -469,7 +469,7 @@ jobs:
469469
steps:
470470
# Harden the runner used by this workflow
471471
# yamllint disable-line rule:line-length
472-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
472+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
473473
with:
474474
egress-policy: 'audit'
475475

‎.github/workflows/gerrit-verify.yaml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -97,7 +97,7 @@ jobs:
9797
steps:
9898
- name: Clear votes
9999
# yamllint disable-line rule:line-length
100-
uses: lfreleng-actions/gerrit-review-action@3a1b27891502e0786a3e2e5a2d0cb0bff1f30c25 # v1.0.0
100+
uses: lfreleng-actions/gerrit-review-action@91db81bb09f604bb620810640c045eeb1f6a9e54 # v1.1.0
101101
with:
102102
host: ${{ vars.LFIT_GERRIT_SERVER }}
103103
username: ${{ vars.LFIT_GERRIT_SSH_USER }}
@@ -127,7 +127,7 @@ jobs:
127127
- name: Checkout Gerrit change
128128
if: inputs.GERRIT_REFSPEC != ''
129129
# yamllint disable-line rule:line-length
130-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
130+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
131131
with:
132132
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
133133
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -164,7 +164,7 @@ jobs:
164164
- name: Checkout Gerrit change
165165
if: inputs.GERRIT_REFSPEC != ''
166166
# yamllint disable-line rule:line-length
167-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
167+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
168168
with:
169169
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
170170
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -202,15 +202,15 @@ jobs:
202202
timeout-minutes: 5
203203
steps:
204204
# yamllint disable-line rule:line-length
205-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
205+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
206206
with:
207207
egress-policy: audit
208208

209209
# --- Gerrit Checkout (when dispatched by gerrit_to_platform) ---
210210
- name: Checkout Gerrit change
211211
if: inputs.GERRIT_REFSPEC != ''
212212
# yamllint disable-line rule:line-length
213-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
213+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
214214
with:
215215
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
216216
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -260,15 +260,15 @@ jobs:
260260
steps:
261261
# Harden the runner used by this workflow
262262
# yamllint disable-line rule:line-length
263-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
263+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
264264
with:
265265
egress-policy: 'audit'
266266

267267
# --- Gerrit Checkout ---
268268
- name: Checkout Gerrit change
269269
if: inputs.GERRIT_REFSPEC != ''
270270
# yamllint disable-line rule:line-length
271-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
271+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
272272
with:
273273
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
274274
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -284,7 +284,7 @@ jobs:
284284
- name: 'Build Python project'
285285
id: python-build
286286
# yamllint disable-line rule:line-length
287-
uses: lfreleng-actions/python-build-action@7ff456c72f1dd50ef212ea7222efc12693221af3 # v1.0.4
287+
uses: lfreleng-actions/python-build-action@9b637a301cebe3b7575269e5c3bf263350daf35d # v1.1.1
288288
with:
289289
clear_cache: ${{ github.event.inputs.clear_cache || 'false' }}
290290

@@ -304,15 +304,15 @@ jobs:
304304
steps:
305305
# Harden the runner used by this workflow
306306
# yamllint disable-line rule:line-length
307-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
307+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
308308
with:
309309
egress-policy: audit
310310

311311
# --- Gerrit Checkout ---
312312
- name: Checkout Gerrit change
313313
if: inputs.GERRIT_REFSPEC != ''
314314
# yamllint disable-line rule:line-length
315-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
315+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
316316
with:
317317
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
318318
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -327,7 +327,7 @@ jobs:
327327

328328
- name: "Python tests [pytest] ${{ matrix.python-version }}"
329329
# yamllint disable-line rule:line-length
330-
uses: lfreleng-actions/python-test-action@92d4110d44ebc18fa4575c6b00203ff67d01a1cb # v1.0.1
330+
uses: lfreleng-actions/python-test-action@aa753462f090101dcb0c4708e9499f55e276e373 # v1.1.2
331331
with:
332332
python_version: ${{ matrix.python-version }}
333333

@@ -347,15 +347,15 @@ jobs:
347347
steps:
348348
# Harden the runner used by this workflow
349349
# yamllint disable-line rule:line-length
350-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
350+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
351351
with:
352352
egress-policy: 'audit'
353353

354354
# --- Gerrit Checkout ---
355355
- name: Checkout Gerrit change
356356
if: inputs.GERRIT_REFSPEC != ''
357357
# yamllint disable-line rule:line-length
358-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
358+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
359359
with:
360360
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
361361
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -370,7 +370,7 @@ jobs:
370370

371371
- name: "Audit dependencies ${{ matrix.python-version }}"
372372
# yamllint disable-line rule:line-length
373-
uses: lfreleng-actions/python-audit-action@1776538e768c52c55c3c96495f6e25f0762ad28f # v0.2.6
373+
uses: lfreleng-actions/python-audit-action@275c85f883b03f5342c1fafd8173b6d996670a1d # v0.2.7
374374
with:
375375
python_version: "${{ matrix.python-version }}"
376376

@@ -389,7 +389,7 @@ jobs:
389389
- name: Checkout Gerrit change
390390
if: inputs.GERRIT_REFSPEC != ''
391391
# yamllint disable-line rule:line-length
392-
uses: lfreleng-actions/checkout-gerrit-change-action@a42e7b28e20da2644d2c5d90f1294d0634a71d9c # v1.0.0
392+
uses: lfreleng-actions/checkout-gerrit-change-action@8523d768952d9690702b4696a8310d2a84b1be39 # v1.0.1
393393
with:
394394
gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }}
395395
gerrit-url: ${{ vars.GERRIT_URL }}
@@ -412,7 +412,7 @@ jobs:
412412

413413
- name: "Upload SBOM artifacts"
414414
# yamllint disable-line rule:line-length
415-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
415+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
416416
with:
417417
name: sbom-files
418418
path: |
@@ -448,7 +448,7 @@ jobs:
448448

449449
- name: "Upload Grype scan results"
450450
# yamllint disable-line rule:line-length
451-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
451+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
452452
if: always()
453453
with:
454454
name: grype-scan-results
@@ -509,10 +509,10 @@ jobs:
509509
steps:
510510
- name: Get workflow conclusion
511511
# yamllint disable-line rule:line-length
512-
uses: im-open/workflow-conclusion@fce18569e28a9f2ed1feca1e6d4251e6a7365fdc # v2.2.4
512+
uses: im-open/workflow-conclusion@7b146947e59eaf7fc3328822357861ab1758c088 # v2.2.5
513513
- name: Set vote
514514
# yamllint disable-line rule:line-length
515-
uses: lfreleng-actions/gerrit-review-action@3a1b27891502e0786a3e2e5a2d0cb0bff1f30c25 # v1.0.0
515+
uses: lfreleng-actions/gerrit-review-action@91db81bb09f604bb620810640c045eeb1f6a9e54 # v1.1.0
516516
with:
517517
host: ${{ vars.LFIT_GERRIT_SERVER }}
518518
username: ${{ vars.LFIT_GERRIT_SSH_USER }}

‎.github/workflows/github2gerrit.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
steps:
4141
# Harden the runner used by this workflow
4242
# yamllint disable-line rule:line-length
43-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
43+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
4444
name: 'Harden runner'
4545
with:
4646
egress-policy: audit
@@ -54,7 +54,7 @@ jobs:
5454

5555
- name: 'Run GitHub2Gerrit Action'
5656
# yamllint disable-line rule:line-length
57-
uses: lfreleng-actions/github2gerrit-action@80213a86d7e5f2b58de497f0388fc9fa87a96b37 # v1.1.0
57+
uses: lfreleng-actions/github2gerrit-action@a6534e68f2060d685f7b16160a4b44ebf86ef9e5 # v1.2.1
5858
with:
5959
USE_PR_AS_COMMIT: true
6060
ALLOW_DUPLICATES: ${{ inputs.allow_duplicates }}

‎.github/workflows/release-drafter.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ jobs:
5454
steps:
5555
# Harden the runner used by this workflow
5656
# yamllint disable-line rule:line-length
57-
- uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
57+
- uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
5858
with:
5959
egress-policy: 'audit'
6060

@@ -72,6 +72,6 @@ jobs:
7272

7373
- name: 'Update draft release'
7474
# yamllint disable-line rule:line-length
75-
uses: release-drafter/release-drafter@139054aeaa9adc52ab36ddf67437541f039b88e2 # v7.1.1
75+
uses: release-drafter/release-drafter@c2e2804cc59f45f57076a99af580d0fedb697927 # v7.3.0
7676
env:
7777
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

0 commit comments

Comments
 (0)