|
71 | 71 | uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 |
72 | 72 |
|
73 | 73 | - name: Set up QEMU |
74 | | - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0 |
| 74 | + uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0 |
75 | 75 |
|
76 | 76 | - name: Set up Docker Buildx |
77 | 77 | uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0 |
@@ -122,7 +122,7 @@ jobs: |
122 | 122 |
|
123 | 123 | - name: Build and push image |
124 | 124 | id: build |
125 | | - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 |
| 125 | + uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0 |
126 | 126 | with: |
127 | 127 | context: . |
128 | 128 | platforms: linux/amd64,linux/arm64,linux/arm/v7 |
@@ -219,14 +219,14 @@ jobs: |
219 | 219 | output: trivy-results.sarif |
220 | 220 |
|
221 | 221 | - name: Upload Trivy scan results as artifact |
222 | | - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 |
| 222 | + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 |
223 | 223 | with: |
224 | 224 | name: "[${{ github.job }}] Trivy scan results" |
225 | 225 | path: trivy-results.sarif |
226 | 226 | retention-days: 5 |
227 | 227 |
|
228 | 228 | - name: Upload Trivy scan results to GitHub Security tab |
229 | | - uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 |
| 229 | + uses: github/codeql-action/upload-sarif@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 |
230 | 230 | with: |
231 | 231 | sarif_file: trivy-results.sarif |
232 | 232 |
|
@@ -291,7 +291,7 @@ jobs: |
291 | 291 | echo "package=${{ steps.chart-name.outputs.value }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT" |
292 | 292 |
|
293 | 293 | - name: Upload chart as artifact |
294 | | - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 |
| 294 | + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 |
295 | 295 | with: |
296 | 296 | name: "[${{ github.job }}] Helm chart" |
297 | 297 | path: ${{ steps.build.outputs.package }} |
@@ -375,14 +375,14 @@ jobs: |
375 | 375 | output: trivy-results.sarif |
376 | 376 |
|
377 | 377 | - name: Upload Trivy scan results as artifact |
378 | | - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 |
| 378 | + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 |
379 | 379 | with: |
380 | 380 | name: "[${{ github.job }}] Trivy scan results" |
381 | 381 | path: trivy-results.sarif |
382 | 382 | retention-days: 5 |
383 | 383 |
|
384 | 384 | - name: Upload Trivy scan results to GitHub Security tab |
385 | | - uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 |
| 385 | + uses: github/codeql-action/upload-sarif@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 |
386 | 386 | with: |
387 | 387 | sarif_file: trivy-results.sarif |
388 | 388 |
|
@@ -449,7 +449,7 @@ jobs: |
449 | 449 | echo "package=${{ github.workspace }}/${{ env.subchartName }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT" |
450 | 450 |
|
451 | 451 | - name: Upload chart as artifact |
452 | | - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 |
| 452 | + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 |
453 | 453 | with: |
454 | 454 | name: "[${{ github.job }}] Helm chart" |
455 | 455 | path: ${{ steps.build.outputs.package }} |
@@ -499,13 +499,13 @@ jobs: |
499 | 499 | output: trivy-results.sarif |
500 | 500 |
|
501 | 501 | - name: Upload Trivy scan results as artifact |
502 | | - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 |
| 502 | + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 |
503 | 503 | with: |
504 | 504 | name: "[${{ github.job }}] Trivy scan results" |
505 | 505 | path: trivy-results.sarif |
506 | 506 | retention-days: 5 |
507 | 507 |
|
508 | 508 | - name: Upload Trivy scan results to GitHub Security tab |
509 | | - uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9 |
| 509 | + uses: github/codeql-action/upload-sarif@6e5455904168f98c75d8e5ad848b4dc4ab3ae77e # v3.28.7 |
510 | 510 | with: |
511 | 511 | sarif_file: trivy-results.sarif |
0 commit comments