3131 persist-credentials : false
3232
3333 - name : Set up .NET
34- uses : actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1 .0
34+ uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2 .0
3535
3636 - name : Verify format
3737 run : dotnet format --verify-no-changes
@@ -124,10 +124,10 @@ jobs:
124124 fi
125125
126126 - name : Set up .NET
127- uses : actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1 .0
127+ uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2 .0
128128
129129 - name : Set up Node
130- uses : actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2 .0
130+ uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3 .0
131131 with :
132132 cache : " npm"
133133 cache-dependency-path : " **/package-lock.json"
@@ -180,7 +180,7 @@ jobs:
180180
181181 # ######### Registries ##########
182182 - name : Log in to GHCR
183- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
183+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
184184 with :
185185 registry : ghcr.io
186186 username : ${{ github.actor }}
@@ -273,7 +273,7 @@ jobs:
273273
274274 - name : Install Cosign
275275 if : github.event_name != 'pull_request' && env.is_publish_branch == 'true'
276- uses : sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
276+ uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
277277
278278 - name : Sign image with Cosign
279279 if : github.event_name != 'pull_request' && env.is_publish_branch == 'true'
@@ -291,14 +291,14 @@ jobs:
291291
292292 - name : Scan Docker image
293293 id : container-scan
294- uses : anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c # v7.3.2
294+ uses : anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
295295 with :
296296 image : ${{ steps.image-tags.outputs.primary_tag }}
297297 fail-build : false
298298 output-format : sarif
299299
300300 - name : Upload Grype results to GitHub
301- uses : github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
301+ uses : github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
302302 with :
303303 sarif_file : ${{ steps.container-scan.outputs.sarif }}
304304 sha : ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.head.sha || github.sha }}
@@ -325,10 +325,10 @@ jobs:
325325 persist-credentials : false
326326
327327 - name : Set up .NET
328- uses : actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1 .0
328+ uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2 .0
329329
330330 - name : Log in to GHCR
331- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
331+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
332332 with :
333333 registry : ghcr.io
334334 username : ${{ github.actor }}
@@ -448,7 +448,7 @@ jobs:
448448 persist-credentials : false
449449
450450 - name : Set up .NET
451- uses : actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309 # v5.1 .0
451+ uses : actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5.2 .0
452452
453453 - name : Print environment
454454 run : |
@@ -635,7 +635,7 @@ jobs:
635635 uses : bitwarden/gh-actions/azure-logout@main
636636
637637 - name : Notify Slack on failure
638- uses : act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d # v2.1 .0
638+ uses : act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 # v2.2 .0
639639 if : failure()
640640 env :
641641 SLACK_WEBHOOK_URL : ${{ steps.retrieve-secrets.outputs.devops-alerts-slack-webhook-url }}
0 commit comments