Skip to content

Commit e13caf0

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the github-actions group across 1 directory with 6 updates
Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.2.0` | `3.3.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.10.0` | `6.13.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.1.0` | `2.2.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.17.9` | `0.18.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.0.9` | `2.2.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.0` | `3.28.8` | Updates `docker/setup-qemu-action` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@49b3bc8...53851d1) Updates `docker/build-push-action` from 6.10.0 to 6.13.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@48aba3b...ca877d9) Updates `actions/attest-build-provenance` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@7668571...520d128) Updates `anchore/sbom-action` from 0.17.9 to 0.18.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@df80a98...f325610) Updates `softprops/action-gh-release` from 2.0.9 to 2.2.1 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@e7a8f85...c95fe14) Updates `github/codeql-action` from 3.28.0 to 3.28.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@48ab28a...dd74661) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 02a2806 commit e13caf0

File tree

8 files changed

+43
-43
lines changed

8 files changed

+43
-43
lines changed

‎.github/workflows/athenapdf-service-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ jobs:
8787
type=ref,event=branch
8888
-
8989
name: Set up QEMU
90-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
90+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9191
-
9292
name: Set up Docker Buildx
9393
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -106,7 +106,7 @@ jobs:
106106
password: ${{ secrets.GITHUB_TOKEN }}
107107
-
108108
name: Build and push
109-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
109+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
110110
id: build-and-push
111111
with:
112112
context: athenapdf-service
@@ -115,26 +115,26 @@ jobs:
115115
tags: ${{ steps.meta.outputs.tags }}
116116
labels: ${{ steps.meta.outputs.labels }}
117117
- name: Attest dockerhub image
118-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
118+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
119119
with:
120120
subject-digest: ${{steps.build-and-push.outputs.digest}}
121121
subject-name: index.docker.io/${{ github.repository_owner }}/athenapdf-service
122122
push-to-registry: true
123123
- name: Attest ghcr image
124-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
124+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
125125
with:
126126
subject-digest: ${{steps.build-and-push.outputs.digest}}
127127
subject-name: ghcr.io/${{ github.repository_owner }}/athenapdf-service
128128
push-to-registry: true
129-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
129+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
130130
if: startsWith(github.ref, 'refs/tags/')
131131
with:
132132
image: ghcr.io/${{ github.repository_owner }}/athenapdf-service@${{steps.build-and-push.outputs.digest}}
133133
output-file: sbom.spdx.json
134134
upload-artifact: false
135135
upload-release-assets: false
136136
- name: Release
137-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
137+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
138138
if: startsWith(github.ref, 'refs/tags/')
139139
with:
140140
files: |

‎.github/workflows/database-tools-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: database-tools
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/database-tools
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/database-tools
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/database-tools@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/docker-host-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: docker-host
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/docker-host
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/docker-host
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/docker-host@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/drush-alias-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: drush-alias
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/drush-alias
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/drush-alias
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/drush-alias@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/insights-scanner-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: insights-scanner
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/insights-scanner
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/insights-scanner
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/insights-scanner@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/logs-concentrator-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: logs-concentrator
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/logs-concentrator
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/logs-concentrator
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/logs-concentrator@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/logs-dispatcher-image.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
type=ref,event=branch
8787
-
8888
name: Set up QEMU
89-
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
89+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
9090
-
9191
name: Set up Docker Buildx
9292
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
@@ -105,7 +105,7 @@ jobs:
105105
password: ${{ secrets.GITHUB_TOKEN }}
106106
-
107107
name: Build and push
108-
uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
108+
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
109109
id: build-and-push
110110
with:
111111
context: logs-dispatcher
@@ -114,26 +114,26 @@ jobs:
114114
tags: ${{ steps.meta.outputs.tags }}
115115
labels: ${{ steps.meta.outputs.labels }}
116116
- name: Attest dockerhub image
117-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
117+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
118118
with:
119119
subject-digest: ${{steps.build-and-push.outputs.digest}}
120120
subject-name: index.docker.io/${{ github.repository_owner }}/logs-dispatcher
121121
push-to-registry: true
122122
- name: Attest ghcr image
123-
uses: actions/attest-build-provenance@7668571508540a607bdfd90a87a560489fe372eb # v2.1.0
123+
uses: actions/attest-build-provenance@520d128f165991a6c774bcb264f323e3d70747f4 # v2.2.0
124124
with:
125125
subject-digest: ${{steps.build-and-push.outputs.digest}}
126126
subject-name: ghcr.io/${{ github.repository_owner }}/logs-dispatcher
127127
push-to-registry: true
128-
- uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
128+
- uses: anchore/sbom-action@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
129129
if: startsWith(github.ref, 'refs/tags/')
130130
with:
131131
image: ghcr.io/${{ github.repository_owner }}/logs-dispatcher@${{steps.build-and-push.outputs.digest}}
132132
output-file: sbom.spdx.json
133133
upload-artifact: false
134134
upload-release-assets: false
135135
- name: Release
136-
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
136+
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
137137
if: startsWith(github.ref, 'refs/tags/')
138138
with:
139139
files: |

‎.github/workflows/ossf-analysis.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,6 @@ jobs:
2626
# of the value entered here.
2727
publish_results: true
2828
- name: Upload SARIF results to code scanning
29-
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
29+
uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
3030
with:
3131
sarif_file: results.sarif

0 commit comments

Comments
 (0)