From 02a2806e91171e5777516325fa594754fbb1f72d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 1 Jan 2025 04:17:16 +0000 Subject: [PATCH] chore(deps): update github actions monthly minor/patch (#103) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/athenapdf-service-image.yaml | 4 ++-- .github/workflows/database-tools-image.yaml | 4 ++-- .github/workflows/docker-host-image.yaml | 4 ++-- .github/workflows/drush-alias-image.yaml | 4 ++-- .github/workflows/insights-scanner-image.yaml | 4 ++-- .github/workflows/logs-concentrator-image.yaml | 4 ++-- .github/workflows/logs-dispatcher-image.yaml | 4 ++-- .github/workflows/ossf-analysis.yaml | 2 +- 8 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/athenapdf-service-image.yaml b/.github/workflows/athenapdf-service-image.yaml index 7631951..8fb491e 100644 --- a/.github/workflows/athenapdf-service-image.yaml +++ b/.github/workflows/athenapdf-service-image.yaml @@ -90,7 +90,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -126,7 +126,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/athenapdf-service push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/athenapdf-service@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/database-tools-image.yaml b/.github/workflows/database-tools-image.yaml index d961e7d..ac4d9db 100644 --- a/.github/workflows/database-tools-image.yaml +++ b/.github/workflows/database-tools-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/database-tools push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/database-tools@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/docker-host-image.yaml b/.github/workflows/docker-host-image.yaml index 149b6b0..4da6b92 100644 --- a/.github/workflows/docker-host-image.yaml +++ b/.github/workflows/docker-host-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/docker-host push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/docker-host@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/drush-alias-image.yaml b/.github/workflows/drush-alias-image.yaml index a22b1ab..8b3211c 100644 --- a/.github/workflows/drush-alias-image.yaml +++ b/.github/workflows/drush-alias-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/drush-alias push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/drush-alias@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/insights-scanner-image.yaml b/.github/workflows/insights-scanner-image.yaml index 95d503f..4fede4e 100644 --- a/.github/workflows/insights-scanner-image.yaml +++ b/.github/workflows/insights-scanner-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/insights-scanner push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/insights-scanner@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/logs-concentrator-image.yaml b/.github/workflows/logs-concentrator-image.yaml index 2258f71..f19ac50 100644 --- a/.github/workflows/logs-concentrator-image.yaml +++ b/.github/workflows/logs-concentrator-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/logs-concentrator push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/logs-concentrator@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/logs-dispatcher-image.yaml b/.github/workflows/logs-dispatcher-image.yaml index a395f83..2e02d23 100644 --- a/.github/workflows/logs-dispatcher-image.yaml +++ b/.github/workflows/logs-dispatcher-image.yaml @@ -89,7 +89,7 @@ jobs: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Login to DockerHub uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 @@ -125,7 +125,7 @@ jobs: subject-digest: ${{steps.build-and-push.outputs.digest}} subject-name: ghcr.io/${{ github.repository_owner }}/logs-dispatcher push-to-registry: true - - uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8 + - uses: anchore/sbom-action@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9 if: startsWith(github.ref, 'refs/tags/') with: image: ghcr.io/${{ github.repository_owner }}/logs-dispatcher@${{steps.build-and-push.outputs.digest}} diff --git a/.github/workflows/ossf-analysis.yaml b/.github/workflows/ossf-analysis.yaml index 81f4a12..83c25b4 100644 --- a/.github/workflows/ossf-analysis.yaml +++ b/.github/workflows/ossf-analysis.yaml @@ -26,6 +26,6 @@ jobs: # of the value entered here. publish_results: true - name: Upload SARIF results to code scanning - uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 + uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 with: sarif_file: results.sarif