diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 9d617c7..45e2785 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -62,7 +62,7 @@ jobs: - name: Set Docker metadata id: meta - uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 + uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0 with: images: | ${{ inputs.dockerhub_user }}/${{ inputs.dockerhub_repo }} @@ -80,19 +80,19 @@ jobs: type=sha,enable=false - name: Set up QEMU - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 + uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 + uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 - name: "[DOCKERHUB] Log in to Docker Hub" - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: "[GHCR] Log in to the Container registry" - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -100,7 +100,7 @@ jobs: - name: Build and push Docker image id: push - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 + uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0 with: cache-from: type=gha cache-to: type=gha,mode=max diff --git a/.github/workflows/helm-lint-test.yml b/.github/workflows/helm-lint-test.yml index cf7b591..fb95ee2 100644 --- a/.github/workflows/helm-lint-test.yml +++ b/.github/workflows/helm-lint-test.yml @@ -32,7 +32,7 @@ jobs: fetch-depth: 0 - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 - name: Set up Python uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 diff --git a/.github/workflows/helm-release-charts.yml b/.github/workflows/helm-release-charts.yml index eba3c94..cb94f5f 100644 --- a/.github/workflows/helm-release-charts.yml +++ b/.github/workflows/helm-release-charts.yml @@ -34,7 +34,7 @@ jobs: git config user.email "$GITHUB_ACTOR@users.noreply.github.com" - name: Set up Helm - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 - name: Add Helm repositories env: @@ -56,14 +56,14 @@ jobs: CR_SKIP_EXISTING: true - name: Login to the Container registry - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Install Cosign - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 - name: Install Oras uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4 diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml index a57618f..376f867 100644 --- a/.github/workflows/helm-release.yml +++ b/.github/workflows/helm-release.yml @@ -79,7 +79,7 @@ jobs: - name: Set up Helm if: steps.tag_exists.outputs.TAG_EXISTS == 'false' || inputs.tag != '' - uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1 + uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0 - name: Run chart-releaser if: steps.tag_exists.outputs.TAG_EXISTS == 'false' || inputs.tag != '' @@ -93,7 +93,7 @@ jobs: - name: Login to the Container registry if: steps.tag_exists.outputs.TAG_EXISTS == 'false' || inputs.tag != '' - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -101,7 +101,7 @@ jobs: - name: Install Cosign if: steps.tag_exists.outputs.TAG_EXISTS == 'false' || inputs.tag != '' - uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 + uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1 - name: Install Oras if: steps.tag_exists.outputs.TAG_EXISTS == 'false' || inputs.tag != '' diff --git a/.github/workflows/terraform-pre-commit.yml b/.github/workflows/terraform-pre-commit.yml index 13bfc37..72c197a 100644 --- a/.github/workflows/terraform-pre-commit.yml +++ b/.github/workflows/terraform-pre-commit.yml @@ -46,7 +46,7 @@ jobs: - name: Terraform min/max versions id: minMax - uses: clowdhaus/terraform-min-max@a86951cbe89f4d15caec805f36aa1dd68863ae32 # v2.1.0 + uses: clowdhaus/terraform-min-max@5e40f8cf535d84fbd031571abd363ffd81dbfbfc # v3.0.1 with: directory: ${{ matrix.directory }} @@ -79,7 +79,7 @@ jobs: - name: Terraform min/max versions id: minMax - uses: clowdhaus/terraform-min-max@a86951cbe89f4d15caec805f36aa1dd68863ae32 # v2.1.0 + uses: clowdhaus/terraform-min-max@5e40f8cf535d84fbd031571abd363ffd81dbfbfc # v3.0.1 - name: Pre-commit Terraform ${{ steps.minMax.outputs.maxVersion }} uses: clowdhaus/terraform-composite-actions/pre-commit@462243b714d762cbcac6732098e9fdb4ab236cb7 # v1.14.0 diff --git a/.github/workflows/terraform-test.yml b/.github/workflows/terraform-test.yml index d210da2..abc417f 100644 --- a/.github/workflows/terraform-test.yml +++ b/.github/workflows/terraform-test.yml @@ -22,7 +22,7 @@ jobs: - name: Terraform min/max versions id: minMax - uses: clowdhaus/terraform-min-max@a86951cbe89f4d15caec805f36aa1dd68863ae32 # v2.1.0 + uses: clowdhaus/terraform-min-max@5e40f8cf535d84fbd031571abd363ffd81dbfbfc # v3.0.1 - name: Setup Terraform uses: hashicorp/setup-terraform@5e8dbf3c6d9deaf4193ca7a8fb23f2ac83bb6c85 # v3.2.0