Update workflow actions.

Signed-off-by: Caroline Russell <caroline@appthreat.dev>
owasp-dep-scan · Feb 1, 2024 · 6d0b7d4 · 6d0b7d4
1 parent 426a151
commit 6d0b7d4
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 15 deletions.
diff --git a/.github/workflows/dockertests.yml b/.github/workflows/dockertests.yml
@@ -45,7 +45,7 @@ jobs:
         PYTHONPATH: "."
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         VDB_HOME: "vdb_data"
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@v4
       with:
         name: containertests_${{ matrix.os }}_python${{ matrix.python-version }}
         path: containertests_${{ matrix.os }}_python${{ matrix.python-version }}
@@ -67,10 +67,10 @@ jobs:
         chmod +x contrib/free_disk_space.sh
         ./contrib/free_disk_space.sh
     - name: Set up JDK
-      uses: actions/setup-java@v3
+      uses: actions/setup-java@v4
       with:
         distribution: 'zulu'
-        java-version: '19'
+        java-version: '20'
     - name: Display Python version
       run: python -c "import sys; print(sys.version)"
     - name: Install dependencies
@@ -95,7 +95,7 @@ jobs:
         VDB_HOME: "vdb_data"
         PYTHONUTF8: 1
         AT_DEBUG_MODE: "debug"
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@v4
       with:
         name: rtests_ubuntu
         path: rtests_ubuntu
@@ -147,7 +147,7 @@ jobs:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         VDB_HOME: "vdb_data"
         PYTHONUTF8: 1
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@v4
       with:
         name: containertests_${{ matrix.os }}
         path: containertests_${{ matrix.os }}
@@ -184,7 +184,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           VDB_HOME: "vdb_data"
       - name: Get boms generated earlier
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: containertests_ubuntu-latest_python3.11
           path: containertests_ubuntu-latest_python3.11
@@ -227,7 +227,7 @@ jobs:
           python3 -m pip install --upgrade pip
           python3 -m pip install .[dev]
       - name: Get boms generated earlier
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: containertests_ubuntu-latest
           path: containertests_ubuntu-latest
@@ -250,7 +250,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           PYTHONUTF8: 1
           AT_DEBUG_MODE: "debug"
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         with:
           name: containertests_${{ matrix.os }}
           path: containertests_${{ matrix.os }}
diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml
@@ -37,6 +37,10 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: '3.11'
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: '20'
       - name: Install dependencies
         run: |
           python3 -m pip install --upgrade pip
@@ -61,27 +65,27 @@ jobs:
           mv nydus-static/* /usr/local/bin/
           rm -rf nydus-static-v2.2.4-linux-amd64.tgz nydus-static
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v5
         with:
           images: |
-            ghcr.io/${{ github.repository }}
-            ghcr.io/owasp-dep-scan/depscan
+            ghcr.io/${{ github.repository }}:release-6.x
+            ghcr.io/owasp-dep-scan/depscan:release-6.x
 
       - name: Build and push Docker images
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64,linux/arm64