Skip to content

Commit 2ace531

Browse files
damientobin1damientobin1
authored
CCM-15257: Bumping Node 20 Actions to Node 24 versions (#103)
* CCM-14499: Pinning all GitHub Actions to SHAs * CCM-14499: Pinning all GitHub Actions to SHAs * CCM-14499: Pinning all GitHub Actions to SHAs * CCM-14499: Pinning all GitHub Actions to SHAs * CCM-14499: Pinning all GitHub Actions to SHAs * CCM-14499: Correct configure-aws-credentials v4 SHA * CCM-14499: Correct annotated tag SHA pins * CCM-14499: Re-pin actions after main rebase
1 parent 273f937 commit 2ace531

11 files changed

Lines changed: 45 additions & 45 deletions

File tree

‎.github/actions/build-docs/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ runs:
88
using: "composite"
99
steps:
1010
- name: Checkout
11-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
11+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1212
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
1313
with:
1414
node-version: 18

‎.github/actions/create-lines-of-code-report/action.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ runs:
3232
run: zip lines-of-code-report.json.zip lines-of-code-report.json
3333
- name: "Upload CLOC report as an artefact"
3434
if: ${{ !env.ACT }}
35-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
35+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
3636
with:
3737
name: lines-of-code-report.json.zip
3838
path: ./lines-of-code-report.json.zip
@@ -44,7 +44,7 @@ runs:
4444
echo "secrets_exist=${{ inputs.idp_aws_report_upload_role_name != '' && inputs.idp_aws_report_upload_bucket_endpoint != '' }}" >> $GITHUB_OUTPUT
4545
- name: "Authenticate to send the report"
4646
if: steps.check.outputs.secrets_exist == 'true'
47-
uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
47+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6
4848
with:
4949
role-to-assume: arn:aws:iam::${{ inputs.idp_aws_report_upload_account_id }}:role/${{ inputs.idp_aws_report_upload_role_name }}
5050
aws-region: ${{ inputs.idp_aws_report_upload_region }}

‎.github/actions/scan-dependencies/action.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ runs:
3232
run: zip sbom-repository-report.json.zip sbom-repository-report.json
3333
- name: "Upload SBOM report as an artefact"
3434
if: ${{ !env.ACT }}
35-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
35+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
3636
with:
3737
name: sbom-repository-report.json.zip
3838
path: ./sbom-repository-report.json.zip
@@ -47,7 +47,7 @@ runs:
4747
run: zip vulnerabilities-repository-report.json.zip vulnerabilities-repository-report.json
4848
- name: "Upload vulnerabilities report as an artefact"
4949
if: ${{ !env.ACT }}
50-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
50+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
5151
with:
5252
name: vulnerabilities-repository-report.json.zip
5353
path: ./vulnerabilities-repository-report.json.zip
@@ -58,7 +58,7 @@ runs:
5858
run: echo "secrets_exist=${{ inputs.idp_aws_report_upload_role_name != '' && inputs.idp_aws_report_upload_bucket_endpoint != '' }}" >> $GITHUB_OUTPUT
5959
- name: "Authenticate to send the reports"
6060
if: steps.check.outputs.secrets_exist == 'true'
61-
uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
61+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6
6262
with:
6363
role-to-assume: arn:aws:iam::${{ inputs.idp_aws_report_upload_account_id }}:role/${{ inputs.idp_aws_report_upload_role_name }}
6464
aws-region: ${{ inputs.idp_aws_report_upload_region }}

‎.github/workflows/cicd-1-pull-request.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
# skip_trivy_package: ${{ steps.skip_trivy.outputs.skip_trivy_package }}
3333
steps:
3434
- name: "Checkout code"
35-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
35+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3636
- name: "Set CI/CD variables"
3737
id: variables
3838
run: |

‎.github/workflows/cicd-3-deploy.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
# tag: ${{ steps.variables.outputs.tag }}
3838
steps:
3939
- name: "Checkout code"
40-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
40+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4141
- name: "Set CI/CD variables"
4242
id: variables
4343
run: |
@@ -70,7 +70,7 @@ jobs:
7070
needs: metadata
7171
steps:
7272
- name: "Checkout code"
73-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
73+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7474
- name: "Get version"
7575
id: get-asset-version
7676
shell: bash
@@ -102,7 +102,7 @@ jobs:
102102
run: |
103103
gh release download ${{steps.get-asset-version.outputs.release_version}} -p jekyll-docs-*.tar --output artifact.tar
104104
105-
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
105+
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
106106
with:
107107
name: jekyll-docs-${{steps.get-asset-version.outputs.release_version}}
108108
path: artifact.tar

‎.github/workflows/scheduled-repository-template-sync.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,9 @@ jobs:
1616

1717
steps:
1818
- name: Check out the repository
19-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
19+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2020
- name: Check out external repository
21-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
21+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2222
with:
2323
repository: NHSDigital/nhs-notify-repository-template
2424
path: nhs-notify-repository-template

‎.github/workflows/scorecard.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6060
# format to the repository Actions tab.
6161
- name: "Upload artifact"
62-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
62+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
6363
with:
6464
name: SARIF file
6565
path: results.sarif

‎.github/workflows/stage-1-commit.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
timeout-minutes: 5
4545
steps:
4646
- name: "Checkout code"
47-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
47+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4848
with:
4949
fetch-depth: 0 # Full history is needed to scan all commits
5050
- name: "Scan secrets"
@@ -55,7 +55,7 @@ jobs:
5555
timeout-minutes: 5
5656
steps:
5757
- name: "Checkout code"
58-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
58+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5959
with:
6060
fetch-depth: 0 # Full history is needed to compare branches
6161
- name: "Check file format"
@@ -66,7 +66,7 @@ jobs:
6666
timeout-minutes: 5
6767
steps:
6868
- name: "Checkout code"
69-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
69+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7070
with:
7171
fetch-depth: 0 # Full history is needed to compare branches
7272
- name: "Check Markdown format"
@@ -80,7 +80,7 @@ jobs:
8080
contents: write
8181
steps:
8282
- name: "Checkout code"
83-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
83+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
8484
with:
8585
fetch-depth: 0 # Full history is needed to compare branches
8686
- name: "Check to see if Terraform Docs are up-to-date"
@@ -101,7 +101,7 @@ jobs:
101101
timeout-minutes: 5
102102
steps:
103103
- name: "Checkout code"
104-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
104+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
105105
with:
106106
fetch-depth: 0 # Full history is needed to compare branches
107107
- name: "Check English usage"
@@ -112,7 +112,7 @@ jobs:
112112
timeout-minutes: 5
113113
steps:
114114
- name: "Checkout code"
115-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
115+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
116116
with:
117117
fetch-depth: 0 # Full history is needed to compare branches
118118
- name: "Check TODO usage"
@@ -124,7 +124,7 @@ jobs:
124124
terraform_changed: ${{ steps.check.outputs.terraform_changed }}
125125
steps:
126126
- name: "Checkout code"
127-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
127+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
128128

129129
- name: "Check for Terraform changes"
130130
id: check
@@ -148,7 +148,7 @@ jobs:
148148
if: needs.detect-terraform-changes.outputs.terraform_changed == 'true'
149149
steps:
150150
- name: "Checkout code"
151-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
151+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
152152
- name: "Setup ASDF"
153153
uses: asdf-vm/actions/setup@1902764435ca0dd2f3388eea723a4f92a4eb8302
154154
- name: "Lint Terraform"
@@ -164,7 +164,7 @@ jobs:
164164
# if: needs.detect-terraform-changes.outputs.terraform_changed == 'true'
165165
# steps:
166166
# - name: "Checkout code"
167-
# uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
167+
# uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
168168
# - name: "Setup ASDF"
169169
# uses: asdf-vm/actions/setup@1902764435ca0dd2f3388eea723a4f92a4eb8302
170170
# - name: "Trivy IaC Scan"
@@ -178,7 +178,7 @@ jobs:
178178
# timeout-minutes: 10
179179
# steps:
180180
# - name: "Checkout code"
181-
# uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
181+
# uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
182182
# - name: "Setup ASDF"
183183
# uses: asdf-vm/actions/setup@1902764435ca0dd2f3388eea723a4f92a4eb8302
184184
# - name: "Trivy Package Scan"
@@ -192,7 +192,7 @@ jobs:
192192
timeout-minutes: 5
193193
steps:
194194
- name: "Checkout code"
195-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
195+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
196196
- name: "Count lines of code"
197197
uses: ./.github/actions/create-lines-of-code-report
198198
with:
@@ -211,7 +211,7 @@ jobs:
211211
timeout-minutes: 5
212212
steps:
213213
- name: "Checkout code"
214-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
214+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
215215
- name: "Scan dependencies"
216216
uses: ./.github/actions/scan-dependencies
217217
with:

‎.github/workflows/stage-2-test.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
timeout-minutes: 5
4848
steps:
4949
- name: "Checkout code"
50-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
50+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5151
- name: "Repo setup"
5252
run: |
5353
npm ci
@@ -61,7 +61,7 @@ jobs:
6161
timeout-minutes: 5
6262
steps:
6363
- name: "Checkout code"
64-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
64+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
6565
- name: "Repo setup"
6666
run: |
6767
npm ci
@@ -72,14 +72,14 @@ jobs:
7272
run: |
7373
make test-unit
7474
- name: "Save the result of fast test suite"
75-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
75+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
7676
with:
7777
name: unit-tests
7878
path: "**/.reports/unit"
7979
include-hidden-files: true
8080
if: always()
8181
- name: "Save the result of code coverage"
82-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
82+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6
8383
with:
8484
name: code-coverage-report
8585
path: ".reports/lcov.info"
@@ -89,7 +89,7 @@ jobs:
8989
timeout-minutes: 5
9090
steps:
9191
- name: "Checkout code"
92-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
92+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
9393
- name: "Repo setup"
9494
run: |
9595
npm ci
@@ -105,7 +105,7 @@ jobs:
105105
timeout-minutes: 5
106106
steps:
107107
- name: "Checkout code"
108-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
108+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
109109
- name: "Repo setup"
110110
run: |
111111
npm ci
@@ -122,7 +122,7 @@ jobs:
122122
timeout-minutes: 5
123123
steps:
124124
- name: "Checkout code"
125-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
125+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
126126
- name: "Run test coverage check"
127127
run: |
128128
make test-coverage
@@ -139,7 +139,7 @@ jobs:
139139
timeout-minutes: 5
140140
steps:
141141
- name: "Checkout code"
142-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
142+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
143143
with:
144144
fetch-depth: 0 # Full history is needed to improving relevancy of reporting
145145
- name: "Download coverage report for SONAR"

‎.github/workflows/stage-3-build.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
timeout-minutes: 3
4040
steps:
4141
- name: "Checkout code"
42-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
42+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4343
- name: "Build docs"
4444
uses: ./.github/actions/build-docs
4545
with:
@@ -50,7 +50,7 @@ jobs:
5050
timeout-minutes: 3
5151
steps:
5252
- name: "Checkout code"
53-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
53+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5454
- name: "Build artefact 1"
5555
run: |
5656
echo "Building artefact 1 ..."
@@ -67,7 +67,7 @@ jobs:
6767
timeout-minutes: 3
6868
steps:
6969
- name: "Checkout code"
70-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
70+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
7171
- name: "Build artefact n"
7272
run: |
7373
echo "Building artefact n ..."

0 commit comments

Comments
 (0)