Skip to content

Commit 7ad0590

Browse files
renovate[bot]renovate[bot]
authored
[deps]: Update gh minor
1 parent 4dede26 commit 7ad0590

File tree

5 files changed

+23
-23
lines changed

5 files changed

+23
-23
lines changed

‎.github/workflows/build.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,10 @@ jobs:
1414

1515
steps:
1616
- name: Check out repo
17-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
17+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1818

1919
- name: Set up .NET
20-
uses: actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
20+
uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0
2121

2222
- name: Publish project
2323
working-directory: src/KeyConnector
@@ -31,7 +31,7 @@ jobs:
3131
ls -atlh ../../../
3232
3333
- name: Upload project artifact
34-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
34+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
3535
with:
3636
name: KeyConnector.zip
3737
path: src/KeyConnector/KeyConnector.zip
@@ -50,7 +50,7 @@ jobs:
5050

5151
steps:
5252
- name: Check out repo
53-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
53+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5454

5555
- name: Log in to Azure
5656
uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
@@ -76,7 +76,7 @@ jobs:
7676
run: echo "name=${_AZ_REGISTRY}/${_PROJECT_NAME}:${IMAGE_TAG}" >> $GITHUB_OUTPUT
7777

7878
- name: Get build artifact
79-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
79+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
8080
with:
8181
name: KeyConnector.zip
8282

@@ -87,7 +87,7 @@ jobs:
8787
8888
- name: Build Docker image
8989
id: build-docker
90-
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
90+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
9191
with:
9292
context: src/KeyConnector
9393
file: src/KeyConnector/Dockerfile
@@ -97,7 +97,7 @@ jobs:
9797

9898
- name: Install Cosign
9999
if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
100-
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
100+
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
101101

102102
- name: Sign image with Cosign
103103
if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
@@ -114,13 +114,13 @@ jobs:
114114
115115
- name: Scan Docker image
116116
id: container-scan
117-
uses: anchore/scan-action@49e50b215b647c5ec97abb66f69af73c46a4ca08 # v5.0.1
117+
uses: anchore/scan-action@869c549e657a088dc0441b08ce4fc0ecdac2bb65 # v5.3.0
118118
with:
119119
image: ${{ steps.image-name.outputs.name }}
120120
fail-build: false
121121
output-format: sarif
122122

123123
- name: Upload Grype results to GitHub
124-
uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
124+
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
125125
with:
126126
sarif_file: ${{ steps.container-scan.outputs.sarif }}

‎.github/workflows/release.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
fi
3434
3535
- name: Check out repo
36-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
36+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3737

3838
- name: Check release version
3939
id: version
@@ -56,7 +56,7 @@ jobs:
5656
needs: setup
5757
steps:
5858
- name: Create release
59-
uses: ncipollo/release-action@2c591bcc8ecdcd2db72b97d6147f871fcd833ba5 # v1.14.0
59+
uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
6060
with:
6161
commit: ${{ github.sha }}
6262
tag: "v${{ needs.setup.outputs.release_version }}"

‎.github/workflows/scan.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,12 @@ jobs:
2424

2525
steps:
2626
- name: Check out repo
27-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
27+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2828
with:
2929
ref: ${{ github.event.pull_request.head.sha }}
3030

3131
- name: Scan with Checkmarx
32-
uses: checkmarx/ast-github-action@f0869bd1a37fddc06499a096101e6c900e815d81 # 2.0.36
32+
uses: checkmarx/ast-github-action@86e9ae570a811f9a1fb85903647a307aa3bf6253 # 2.0.44
3333
env:
3434
INCREMENTAL: "${{ contains(github.event_name, 'pull_request') && '--sast-incremental' || '' }}"
3535
with:
@@ -44,7 +44,7 @@ jobs:
4444
--output-path . ${{ env.INCREMENTAL }}
4545
4646
- name: Upload Checkmarx results to GitHub
47-
uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
47+
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
4848
with:
4949
sarif_file: cx_result.sarif
5050

@@ -58,19 +58,19 @@ jobs:
5858

5959
steps:
6060
- name: Set up JDK 17
61-
uses: actions/setup-java@b36c23c0d998641eff861008f374ee103c25ac73 # v4.4.0
61+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
6262
with:
6363
java-version: 17
6464
distribution: "zulu"
6565

6666
- name: Check out repo
67-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
67+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6868
with:
6969
fetch-depth: 0
7070
ref: ${{ github.event.pull_request.head.sha }}
7171

7272
- name: Set up .NET
73-
uses: actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
73+
uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0
7474

7575
- name: Install SonarCloud scanner
7676
run: dotnet tool install dotnet-sonarscanner -g

‎.github/workflows/test.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,10 +38,10 @@ jobs:
3838

3939
steps:
4040
- name: Check out repo
41-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
41+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4242

4343
- name: Set up .NET
44-
uses: actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
44+
uses: actions/setup-dotnet@3951f0dfe7a07e2313ec93c75700083e2005cbab # v4.3.0
4545

4646
- name: Test solution
4747
run: dotnet test --configuration Debug --logger "trx;LogFileName=test-results.trx" /p:CoverletOutputFormatter="cobertura" --collect:"XPlat Code Coverage"
@@ -56,4 +56,4 @@ jobs:
5656
fail-on-error: true
5757

5858
- name: Upload to codecov.io
59-
uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
59+
uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0

‎.github/workflows/version-bump.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
fi
3636
3737
- name: Check out repo
38-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
38+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3939

4040
- name: Log in to Azure
4141
uses: Azure/login@e15b166166a8746d1a47596803bd8c1b595455cf # v1.6.0
@@ -51,7 +51,7 @@ jobs:
5151
github-gpg-private-key-passphrase"
5252

5353
- name: Import GPG key
54-
uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0
54+
uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
5555
with:
5656
gpg_private_key: ${{ steps.retrieve-secrets.outputs.github-gpg-private-key }}
5757
passphrase: ${{ steps.retrieve-secrets.outputs.github-gpg-private-key-passphrase }}
@@ -155,7 +155,7 @@ jobs:
155155
run: git push -u origin $PR_BRANCH
156156

157157
- name: Generate GH App token
158-
uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0
158+
uses: actions/create-github-app-token@21cfef2b496dd8ef5b904c159339626a10ad380e # v1.11.6
159159
id: app-token
160160
with:
161161
app-id: ${{ secrets.BW_GHAPP_ID }}

0 commit comments

Comments
 (0)