Skip to content
This repository was archived by the owner on Jun 1, 2026. It is now read-only.

Commit 8d793c7

Browse files
renovate[bot]renovate[bot]
authored
⬆️ (deps): Update GitHub actions
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent aa6061e commit 8d793c7

17 files changed

Lines changed: 52 additions & 52 deletions

‎.github/workflows/_.helm.lint.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
contents: read
2020
runs-on: ubuntu-latest
2121
steps:
22-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
22+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2323

2424
- uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5
2525
env:
@@ -39,7 +39,7 @@ jobs:
3939
contents: read
4040
runs-on: ubuntu-latest
4141
steps:
42-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
42+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
4343

4444
- uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
4545
id: restore-asdf
@@ -105,8 +105,8 @@ jobs:
105105
security-events: write
106106
runs-on: ubuntu-latest
107107
steps:
108-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
109-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
108+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
109+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
110110
with:
111111
format: sarif
112112
hide-progress: false
@@ -119,7 +119,7 @@ jobs:
119119
sarif_file: trivy-results.sarif
120120

121121
# NOTE: fail the build only if vulnerabilities with severity HIGH or CRITICAL are found
122-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
122+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
123123
with:
124124
exit-code: '1'
125125
format: table

‎.github/workflows/_.helm.list-changed.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ jobs:
1616
contents: read
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
19+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2020
with:
2121
fetch-depth: 10
2222

23-
- uses: tj-actions/changed-files@0874344d6ebbaa00a27da73276ae7162fadcaf69 # v44.3.0
23+
- uses: tj-actions/changed-files@d6babd6899969df1a11d14c368283ea4436bca78 # v44.5.2
2424
id: changed-images
2525
with:
2626
dir_names: true

‎.github/workflows/_.helm.test.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
permissions:
2121
contents: read
2222
steps:
23-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
23+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2424
with:
2525
fetch-depth: 0
2626

@@ -38,7 +38,7 @@ jobs:
3838
python-version: '3.9'
3939
check-latest: true
4040
- uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
41-
- uses: helm/kind-action@99576bfa6ddf9a8e612d83b513da5a75875caced # v1.9.0
41+
- uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
4242
with:
4343
cluster_name: kind
4444
wait: 30s

‎.github/workflows/_.images.build.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
contents: read
4848
runs-on: ubuntu-latest
4949
steps:
50-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
50+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
5151
with:
5252
fetch-depth: 1
5353

@@ -122,13 +122,13 @@ jobs:
122122
matrix:
123123
platform: ${{ fromJson(needs.metadata.outputs.build-platforms) }}
124124
steps:
125-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
125+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
126126
with:
127127
fetch-depth: 1
128128

129129
- uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
130130
- uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
131-
- uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
131+
- uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
132132
with:
133133
registry: ghcr.io
134134
username: ${{ github.actor }}
@@ -146,7 +146,7 @@ jobs:
146146
com.github.beluga-cloud.ci.workflow.url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
147147
org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}/blob/${{ github.sha }}/${{ inputs.containerfile }}
148148
149-
- uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
149+
- uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
150150
id: build
151151
with:
152152
context: ${{ needs.metadata.outputs.build-context }}
@@ -173,7 +173,7 @@ jobs:
173173
- name: Rename OCI image artifact before upload
174174
if: ${{ inputs.dry-run }}
175175
run: mv ${{ needs.metadata.outputs.image-slug }}.tar oci.${{ needs.metadata.outputs.image-slug }}-${{ matrix.platform.arch }}-${{ matrix.platform.os }}.tar
176-
- uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2
176+
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
177177
if: ${{ inputs.dry-run }}
178178
with:
179179
name: oci.${{ needs.metadata.outputs.image-slug }}-${{ matrix.platform.arch }}-${{ matrix.platform.os }}.tar
@@ -208,8 +208,8 @@ jobs:
208208
security-events: write
209209
runs-on: ubuntu-latest
210210
steps:
211-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
212-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
211+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
212+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
213213
with:
214214
format: sarif
215215
hide-progress: false
@@ -222,7 +222,7 @@ jobs:
222222
sarif_file: trivy-results.sarif
223223

224224
# NOTE: fail the build only if vulnerabilities with severity HIGH or CRITICAL are found
225-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
225+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
226226
with:
227227
exit-code: '1'
228228
format: table

‎.github/workflows/_.images.lint.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
contents: read
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
18+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
1919
- uses: hadolint/hadolint-action@54c9adbab1582c2ef04b2016b760714a4bfde3cf # v3.1.0
2020
with:
2121
dockerfile: ${{ inputs.containerfile }}

‎.github/workflows/_.images.list-changed.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,11 @@ jobs:
2323
contents: read
2424
runs-on: ubuntu-latest
2525
steps:
26-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
26+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2727
with:
2828
fetch-depth: 10
2929

30-
- uses: tj-actions/changed-files@0874344d6ebbaa00a27da73276ae7162fadcaf69 # v44.3.0
30+
- uses: tj-actions/changed-files@d6babd6899969df1a11d14c368283ea4436bca78 # v44.5.2
3131
id: changed-images
3232
with:
3333
files: ${{ inputs.pattern }}

‎.github/workflows/_.images.supply-chain.for-artifacts.yaml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -21,25 +21,25 @@ jobs:
2121
permissions:
2222
contents: read
2323
steps:
24-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
24+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2525
with:
2626
fetch-depth: 1
2727

28-
- uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
28+
- uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
2929
id: download-oci
3030
with:
3131
name: ${{ inputs.artifact-ref }}
3232

3333
- name: Extract OCI-Archive for Trivy
3434
run: "skopeo copy oci-archive:${{ inputs.artifact-ref }} oci:${{ github.workspace }}/trivy-${{ github.run_id }}"
3535

36-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
36+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
3737
with:
3838
input: trivy-${{ github.run_id }}
3939
format: cyclonedx
4040
output: sbom.cyclonedx.json
4141

42-
- uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2
42+
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
4343
with:
4444
name: sbom-cyclonedx.${{ inputs.name }}.json
4545
path: sbom.cyclonedx.json
@@ -53,30 +53,30 @@ jobs:
5353
contents: read
5454
security-events: write
5555
steps:
56-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
56+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
5757
with:
5858
fetch-depth: 1
5959

60-
- uses: actions/download-artifact@8caf195ad4b1dee92908e23f56eeb0696f1dd42d # v4.1.5
60+
- uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
6161
id: download-oci
6262
with:
6363
name: ${{ inputs.artifact-ref }}
6464

6565
- name: Extract OCI-Archive for Trivy
6666
run: skopeo copy oci-archive:${{ inputs.artifact-ref }} oci:${{ github.workspace }}/trivy-${{ github.run_id }}
6767

68-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
68+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
6969
with:
7070
input: trivy-${{ github.run_id }}
7171
format: cosign-vuln
7272
output: vulnerabilities.cosign-vuln.json
73-
- uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # v4.3.2
73+
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
7474
with:
7575
name: cosign-vuln.${{ inputs.name }}.json
7676
path: vulnerabilities.cosign-vuln.json
7777

7878
# Upload SARIF report for GitHub CodeQL at the same time
79-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
79+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
8080
with:
8181
input: trivy-${{ github.run_id }}
8282
format: sarif

‎.github/workflows/_.images.supply-chain.for-registry.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ jobs:
1818
id-token: write
1919
packages: write
2020
steps:
21-
- uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
21+
- uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
2222
with:
2323
registry: ghcr.io
2424
username: ${{ github.actor }}
2525
password: ${{ secrets.GITHUB_TOKEN }}
2626

27-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
27+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
2828
with:
2929
image-ref: ${{ inputs.image-ref }}
3030
format: cyclonedx
@@ -45,15 +45,15 @@ jobs:
4545
packages: write
4646
security-events: write
4747
steps:
48-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
48+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
4949

50-
- uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
50+
- uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
5151
with:
5252
registry: ghcr.io
5353
username: ${{ github.actor }}
5454
password: ${{ secrets.GITHUB_TOKEN }}
5555

56-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
56+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
5757
with:
5858
image-ref: ${{ inputs.image-ref }}
5959
format: cosign-vuln
@@ -64,7 +64,7 @@ jobs:
6464
run: cosign attest --yes --replace --predicate vulnerabilities.cosign-vuln.json --type vuln "${{ inputs.image-ref }}"
6565

6666
# Upload SARIF report for GitHub CodeQL at the same time
67-
- uses: aquasecurity/trivy-action@d710430a6722f083d3b36b8339ff66b32f22ee55 # 0.19.0
67+
- uses: aquasecurity/trivy-action@595be6a0f6560a0a8fc419ddf630567fc623531d # 0.22.0
6868
with:
6969
image-ref: ${{ inputs.image-ref }}
7070
format: sarif

‎.github/workflows/push,schedule,workflow_dispatch.asdf.refresh-cache.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
contents: read
2323
runs-on: ubuntu-latest
2424
steps:
25-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
25+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
2626
with:
2727
fetch-depth: 0
2828

‎.github/workflows/push.helm.fix-renovate.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
with:
4545
app_id: ${{ secrets.BOT_ID }}
4646
private_key: ${{ secrets.BOT_PKEY }}
47-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
47+
- uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
4848
with:
4949
fetch-depth: 0
5050
token: ${{ steps.app_auth.outputs.token }}

0 commit comments

Comments
 (0)