@@ -67,13 +67,13 @@ jobs:
6767
6868 steps :
6969 - name : Checkout repository
70- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
70+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7171
7272 - name : Set up QEMU
73- uses : docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # v2 .2.0
73+ uses : docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 .2.0
7474
7575 - name : Set up Docker Buildx
76- uses : docker/setup-buildx-action@4c0219f9ac95b02789c1075625400b2acbff50b1 # v2.9 .1
76+ uses : docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7 .1
7777
7878 - name : Set up Cosign
7979 uses : sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
8484
8585 - name : Gather build metadata
8686 id : meta
87- uses : docker/metadata-action@818d4b7b91585d195f67373fd9cb0332e31a7175 # v4 .6.0
87+ uses : docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5 .6.1
8888 with :
8989 images : ${{ steps.image-name.outputs.value }}
9090 flavor : |
@@ -111,7 +111,7 @@ jobs:
111111 if_false : type=oci,dest=image.tar
112112
113113 - name : Login to GitHub Container Registry
114- uses : docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2 .0
114+ uses : docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3 .0
115115 with :
116116 registry : ghcr.io
117117 username : ${{ github.actor }}
@@ -120,7 +120,7 @@ jobs:
120120
121121 - name : Build and push image
122122 id : build
123- uses : docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1
123+ uses : docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
124124 with :
125125 context : .
126126 platforms : linux/amd64,linux/arm64,linux/arm/v7
@@ -220,7 +220,7 @@ jobs:
220220 output : trivy-results.sarif
221221
222222 - name : Upload Trivy scan results as artifact
223- uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1 .3
223+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4 .3
224224 with :
225225 name : " [${{ github.job }}] Trivy scan results"
226226 path : trivy-results.sarif
@@ -248,7 +248,7 @@ jobs:
248248
249249 steps :
250250 - name : Checkout repository
251- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
251+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
252252
253253 - name : Set up Helm
254254 uses : azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
@@ -288,13 +288,13 @@ jobs:
288288 echo "package=${{ steps.chart-name.outputs.value }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT"
289289
290290 - name : Upload chart as artifact
291- uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1 .3
291+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4 .3
292292 with :
293293 name : " [${{ github.job }}] Helm chart"
294294 path : ${{ steps.build.outputs.package }}
295295
296296 - name : Login to GitHub Container Registry
297- uses : docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2 .0
297+ uses : docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3 .0
298298 with :
299299 registry : ghcr.io
300300 username : ${{ github.actor }}
@@ -372,7 +372,7 @@ jobs:
372372 output : trivy-results.sarif
373373
374374 - name : Upload Trivy scan results as artifact
375- uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1 .3
375+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4 .3
376376 with :
377377 name : " [${{ github.job }}] Trivy scan results"
378378 path : trivy-results.sarif
@@ -405,7 +405,7 @@ jobs:
405405
406406 steps :
407407 - name : Checkout repository
408- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
408+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
409409
410410 - name : Set up Helm
411411 uses : azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
@@ -445,7 +445,7 @@ jobs:
445445 echo "package=${{ github.workspace }}/${{ env.subchartName }}-${{ steps.version.outputs.value }}.tgz" >> "$GITHUB_OUTPUT"
446446
447447 - name : Upload chart as artifact
448- uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1 .3
448+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4 .3
449449 with :
450450 name : " [${{ github.job }}] Helm chart"
451451 path : ${{ steps.build.outputs.package }}
@@ -495,7 +495,7 @@ jobs:
495495 output : trivy-results.sarif
496496
497497 - name : Upload Trivy scan results as artifact
498- uses : actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1 .3
498+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4 .3
499499 with :
500500 name : " [${{ github.job }}] Trivy scan results"
501501 path : trivy-results.sarif
0 commit comments