@@ -14,29 +14,29 @@ jobs:
1414 timeout-minutes : 10
1515 steps :
1616 - name : Harden Runner
17- uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde
17+ uses : step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2
1818 with :
1919 egress-policy : audit
2020 - name : Set up Go
21- uses : actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
21+ uses : actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
2222 with :
2323 go-version : " 1.25"
2424 check-latest : true
2525 - name : Setup buildx instance
26- uses : docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6 .1
26+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11 .1
2727 with :
2828 use : true
29- - uses : actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
29+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
3030 with :
3131 key : ${{ runner.OS }}-go-${{ hashFiles('**/go.sum') }}
3232 restore-keys : |
3333 ${{ runner.os }}-go-
3434 path : |
3535 ~/go/pkg/mod
3636 ~/.cache/go-build
37- - uses : crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0 .0
37+ - uses : crazy-max/ghaction-github-runtime@3cb05d89e1f492524af3d41a1c98c83bc3025124 # v3.1 .0
3838 - name : Check out code into the Go module directory
39- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
39+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
4040 - run : ' echo ${{ inputs.bucket-id }}'
4141 - name : Set env
4242 run : |
4545 - name : Build remover
4646 run : ' make docker-build-remover OUTPUT_TYPE=type=oci,dest=./${REMOVER_REPO}_${REMOVER_TAG}.tar,name=${REMOVER_REPO}:${REMOVER_TAG}'
4747 - name : Upload Build Artifacts
48- uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4 .0
48+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0 .0
4949 with :
5050 name : ${{ inputs.bucket-id }}-remover
5151 path : remover_test.tar
@@ -57,37 +57,37 @@ jobs:
5757 timeout-minutes : 10
5858 steps :
5959 - name : Harden Runner
60- uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde
60+ uses : step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2
6161 with :
6262 egress-policy : audit
6363 - name : Set up Go
64- uses : actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
64+ uses : actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
6565 with :
6666 go-version : " 1.25"
6767 check-latest : true
6868 - name : Setup buildx instance
69- uses : docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6 .1
69+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11 .1
7070 with :
7171 use : true
72- - uses : actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
72+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7373 with :
7474 key : ${{ runner.OS }}-go-${{ hashFiles('**/go.sum') }}
7575 restore-keys : |
7676 ${{ runner.os }}-go-
7777 path : |
7878 ~/go/pkg/mod
7979 ~/.cache/go-build
80- - uses : crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0 .0
80+ - uses : crazy-max/ghaction-github-runtime@3cb05d89e1f492524af3d41a1c98c83bc3025124 # v3.1 .0
8181 - name : Check out code into the Go module directory
82- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
82+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
8383 - name : Set env
8484 run : |
8585 echo TRIVY_SCANNER_REPO=scanner >> $GITHUB_ENV
8686 echo TRIVY_SCANNER_TAG=test >> $GITHUB_ENV
8787 - name : Build trivy-scanner
8888 run : ' make docker-build-trivy-scanner OUTPUT_TYPE=type=oci,dest=./${TRIVY_SCANNER_REPO}_${TRIVY_SCANNER_TAG}.tar,name=${TRIVY_SCANNER_REPO}:${TRIVY_SCANNER_TAG}'
8989 - name : Upload Build Artifacts
90- uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4 .0
90+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0 .0
9191 with :
9292 name : ${{ inputs.bucket-id }}-scanner
9393 path : scanner_test.tar
@@ -99,37 +99,37 @@ jobs:
9999 timeout-minutes : 10
100100 steps :
101101 - name : Harden Runner
102- uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde
102+ uses : step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2
103103 with :
104104 egress-policy : audit
105105 - name : Set up Go
106- uses : actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
106+ uses : actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
107107 with :
108108 go-version : " 1.25"
109109 check-latest : true
110110 - name : Setup buildx instance
111- uses : docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6 .1
111+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11 .1
112112 with :
113113 use : true
114- - uses : actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
114+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
115115 with :
116116 key : ${{ runner.OS }}-go-${{ hashFiles('**/go.sum') }}
117117 restore-keys : |
118118 ${{ runner.os }}-go-
119119 path : |
120120 ~/go/pkg/mod
121121 ~/.cache/go-build
122- - uses : crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0 .0
122+ - uses : crazy-max/ghaction-github-runtime@3cb05d89e1f492524af3d41a1c98c83bc3025124 # v3.1 .0
123123 - name : Check out code into the Go module directory
124- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
124+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
125125 - name : Set env
126126 run : |
127127 echo MANAGER_REPO=manager >> $GITHUB_ENV
128128 echo MANAGER_TAG=test >> $GITHUB_ENV
129129 - name : Build manager
130130 run : ' make docker-build-manager OUTPUT_TYPE=type=oci,dest=./${MANAGER_REPO}_${MANAGER_TAG}.tar,name=${MANAGER_REPO}:${MANAGER_TAG}'
131131 - name : Upload Build Artifacts
132- uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4 .0
132+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0 .0
133133 with :
134134 name : ${{ inputs.bucket-id }}-manager
135135 path : manager_test.tar
@@ -141,37 +141,37 @@ jobs:
141141 timeout-minutes : 10
142142 steps :
143143 - name : Harden Runner
144- uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde
144+ uses : step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2
145145 with :
146146 egress-policy : audit
147147 - name : Set up Go
148- uses : actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
148+ uses : actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
149149 with :
150150 go-version : " 1.25"
151151 check-latest : true
152152 - name : Setup buildx instance
153- uses : docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6 .1
153+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11 .1
154154 with :
155155 use : true
156- - uses : actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
156+ - uses : actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
157157 with :
158158 key : ${{ runner.OS }}-go-${{ hashFiles('**/go.sum') }}
159159 restore-keys : |
160160 ${{ runner.os }}-go-
161161 path : |
162162 ~/go/pkg/mod
163163 ~/.cache/go-build
164- - uses : crazy-max/ghaction-github-runtime@b3a9207c0e1ef41f4cf215303c976869d0c2c1c4 # v3.0 .0
164+ - uses : crazy-max/ghaction-github-runtime@3cb05d89e1f492524af3d41a1c98c83bc3025124 # v3.1 .0
165165 - name : Check out code into the Go module directory
166- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
166+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
167167 - name : Set env
168168 run : |
169169 echo COLLECTOR_REPO=collector >> $GITHUB_ENV
170170 echo COLLECTOR_TAG=test >> $GITHUB_ENV
171171 - name : Build collector
172172 run : ' make docker-build-collector OUTPUT_TYPE=type=oci,dest=./${COLLECTOR_REPO}_${COLLECTOR_TAG}.tar,name=${COLLECTOR_REPO}:${COLLECTOR_TAG}'
173173 - name : Upload Build Artifacts
174- uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4 .0
174+ uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0 .0
175175 with :
176176 name : ${{ inputs.bucket-id }}-collector
177177 path : collector_test.tar
0 commit comments