Skip to content

Commit 37c1950

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): update github actions monthly minor/patch
1 parent 0a2553b commit 37c1950

9 files changed

+41
-41
lines changed

‎.github/workflows/athenapdf-service-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -106,7 +106,7 @@ jobs:
106106
password: ${{ secrets.GITHUB_TOKEN }}
107107
-
108108
name: Build and push
109-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
109+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
110110
id: build-and-push
111111
with:
112112
context: athenapdf-service
@@ -115,26 +115,26 @@ jobs:
115115
tags: ${{ steps.meta.outputs.tags }}
116116
labels: ${{ steps.meta.outputs.labels }}
117117
- name: Attest dockerhub image
118-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
118+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
119119
with:
120120
subject-digest: ${{steps.build-and-push.outputs.digest}}
121121
subject-name: index.docker.io/${{ github.repository_owner }}/athenapdf-service
122122
push-to-registry: true
123123
- name: Attest ghcr image
124-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
124+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
125125
with:
126126
subject-digest: ${{steps.build-and-push.outputs.digest}}
127127
subject-name: ghcr.io/${{ github.repository_owner }}/athenapdf-service
128128
push-to-registry: true
129-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
130130
if: startsWith(github.ref, 'refs/tags/')
131131
with:
132132
image: ghcr.io/${{ github.repository_owner }}/athenapdf-service@${{steps.build-and-push.outputs.digest}}
133133
output-file: sbom.spdx.json
134134
upload-artifact: false
135135
upload-release-assets: false
136136
- name: Release
137-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
137+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
138138
if: startsWith(github.ref, 'refs/tags/')
139139
with:
140140
files: |

‎.github/workflows/database-tools-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: database-tools
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/database-tools
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/database-tools
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/database-tools@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/docker-host-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: docker-host
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/docker-host
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/docker-host
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/docker-host@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/drush-alias-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: drush-alias
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/drush-alias
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/drush-alias
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/drush-alias@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/insights-scanner-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: insights-scanner
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/insights-scanner
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/insights-scanner
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/insights-scanner@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/insights-trivy-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -107,7 +107,7 @@ jobs:
107107
password: ${{ secrets.GITHUB_TOKEN }}
108108
-
109109
name: Build and push
110-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
110+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
111111
id: build-and-push
112112
with:
113113
context: insights-trivy
@@ -116,26 +116,26 @@ jobs:
116116
tags: ${{ steps.meta.outputs.tags }}
117117
labels: ${{ steps.meta.outputs.labels }}
118118
- name: Attest dockerhub image
119-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
119+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
120120
with:
121121
subject-digest: ${{steps.build-and-push.outputs.digest}}
122122
subject-name: index.docker.io/${{ github.repository_owner }}/insights-trivy
123123
push-to-registry: true
124124
- name: Attest ghcr image
125-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
125+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
126126
with:
127127
subject-digest: ${{steps.build-and-push.outputs.digest}}
128128
subject-name: ghcr.io/${{ github.repository_owner }}/insights-trivy
129129
push-to-registry: true
130-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
130+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
131131
if: startsWith(github.ref, 'refs/tags/')
132132
with:
133133
image: ghcr.io/${{ github.repository_owner }}/insights-trivy@${{steps.build-and-push.outputs.digest}}
134134
output-file: sbom.spdx.json
135135
upload-artifact: false
136136
upload-release-assets: false
137137
- name: Release
138-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
138+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
139139
if: startsWith(github.ref, 'refs/tags/')
140140
with:
141141
files: |

‎.github/workflows/logs-concentrator-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: logs-concentrator
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/logs-concentrator
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/logs-concentrator
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/logs-concentrator@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/logs-dispatcher-image.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
108+
uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
109109
id: build-and-push
110110
with:
111111
context: logs-dispatcher
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
117+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/logs-dispatcher
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
123+
uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/logs-dispatcher
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
128+
- uses: anchore/sbom-action@9f7302141466aa6482940f15371237e9d9f4c34a # v0.19.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/logs-dispatcher@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
136+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/ossf-analysis.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,6 @@ jobs:
2626
# of the value entered here.
2727
publish_results: true
2828
- name: Upload SARIF results to code scanning
29-
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
29+
uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
3030
with:
3131
sarif_file: results.sarif

0 commit comments

Comments
 (0)