Skip to content

Commit f1ad5cf

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the all group with 3 updates (#1497)
Bumps the all group with 3 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [github/codeql-action](https://github.com/github/codeql-action) and [chainguard-dev/actions](https://github.com/chainguard-dev/actions). Updates `step-security/harden-runner` from 2.19.0 to 2.19.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@8d3c67d...a5ad31d) Updates `github/codeql-action` from 4.35.2 to 4.35.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...e46ed2c) Updates `chainguard-dev/actions` from 1.6.17 to 1.6.18 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](chainguard-dev/actions@916fec0...4a81273) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github/codeql-action dependency-version: 4.35.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions dependency-version: 1.6.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent a5d4324 commit f1ad5cf

11 files changed

Lines changed: 27 additions & 27 deletions

File tree

‎.github/workflows/actionlint.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
name: Action lint
2525
runs-on: ubuntu-latest
2626
steps:
27-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
27+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2828
with:
2929
egress-policy: block
3030
allowed-endpoints: >

‎.github/workflows/codeql.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
packages: read
2727
security-events: write
2828
steps:
29-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
29+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3030
with:
3131
egress-policy: block
3232
allowed-endpoints: >
@@ -97,7 +97,7 @@ jobs:
9797
check-latest: true
9898
cache: true
9999
- name: Initialize CodeQL
100-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
100+
uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
101101
with:
102102
languages: go
103103
build-mode: manual
@@ -108,7 +108,7 @@ jobs:
108108
PKG_CONFIG_PATH: ${{ github.workspace }}/yara-x-install
109109
LD_LIBRARY_PATH: ${{ github.workspace }}/yara-x-install
110110
- name: Perform CodeQL Analysis
111-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
111+
uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
112112
with:
113113
category: "/language:go"
114114
analyze-actions:
@@ -120,7 +120,7 @@ jobs:
120120
packages: read
121121
security-events: write
122122
steps:
123-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
123+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
124124
with:
125125
egress-policy: block
126126
allowed-endpoints: >
@@ -141,11 +141,11 @@ jobs:
141141
with:
142142
persist-credentials: false
143143
- name: Initialize CodeQL
144-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
144+
uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
145145
with:
146146
languages: actions
147147
build-mode: none
148148
- name: Perform CodeQL Analysis
149-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
149+
uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
150150
with:
151151
category: "/language:actions"

‎.github/workflows/digestabot.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
id-token: write
2222

2323
steps:
24-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
24+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2525
with:
2626
egress-policy: block
2727
allowed-endpoints: >
@@ -36,7 +36,7 @@ jobs:
3636
release-assets.githubusercontent.com:443
3737
tuf-repo-cdn.sigstore.dev:443
3838
39-
- uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
39+
- uses: chainguard-dev/actions/setup-gitsign@4a81273c8653122cf4e48cc248f9073b660c5e6d
4040

4141
- uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
4242
id: octo-sts

‎.github/workflows/fuzz.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
targets: ${{ steps.find.outputs.targets }}
4646
steps:
4747
- name: Harden the runner (Audit all outbound calls)
48-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
48+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
4949
with:
5050
egress-policy: block
5151
allowed-endpoints: >

‎.github/workflows/release.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
id-token: write
2020
contents: write
2121
steps:
22-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
22+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2323
with:
2424
egress-policy: block
2525
allowed-endpoints: >
@@ -29,7 +29,7 @@ jobs:
2929
github.com:443
3030
octo-sts.dev:443
3131
release-assets.githubusercontent.com:443
32-
- uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
32+
- uses: chainguard-dev/actions/setup-gitsign@4a81273c8653122cf4e48cc248f9073b660c5e6d
3333
- name: Set up Octo-STS
3434
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
3535
id: octo-sts

‎.github/workflows/scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636

3737
steps:
3838
- name: Harden the runner (Audit all outbound calls)
39-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
39+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
4040
with:
4141
egress-policy: block
4242
allowed-endpoints: >
@@ -90,6 +90,6 @@ jobs:
9090
# Upload the results to GitHub's code scanning dashboard (optional).
9191
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
9292
- name: "Upload to code-scanning"
93-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
93+
uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
9494
with:
9595
sarif_file: results.sarif

‎.github/workflows/style.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
contents: read
2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
28+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2929
with:
3030
egress-policy: block
3131
allowed-endpoints: >
@@ -62,7 +62,7 @@ jobs:
6262
contents: read
6363
steps:
6464
- name: Harden Runner
65-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
65+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
6666
with:
6767
egress-policy: block
6868
allowed-endpoints: >
@@ -98,7 +98,7 @@ jobs:
9898
contents: read
9999
steps:
100100
- name: Harden Runner
101-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
101+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
102102
with:
103103
egress-policy: block
104104
allowed-endpoints: >
@@ -125,7 +125,7 @@ jobs:
125125
go-version-file: go.mod
126126
check-latest: true
127127

128-
- uses: chainguard-dev/actions/gofmt@916fec00fb80f3cd124a0b41eef79ee63f607c5d # main
128+
- uses: chainguard-dev/actions/gofmt@4a81273c8653122cf4e48cc248f9073b660c5e6d # main
129129
with:
130130
args: -s
131131

@@ -136,7 +136,7 @@ jobs:
136136
contents: read
137137
steps:
138138
- name: Harden Runner
139-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
139+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
140140
with:
141141
egress-policy: block
142142
allowed-endpoints: >
@@ -163,7 +163,7 @@ jobs:
163163
go-version-file: go.mod
164164
check-latest: true
165165

166-
- uses: chainguard-dev/actions/goimports@916fec00fb80f3cd124a0b41eef79ee63f607c5d # main
166+
- uses: chainguard-dev/actions/goimports@4a81273c8653122cf4e48cc248f9073b660c5e6d # main
167167

168168
golangci-lint:
169169
name: golangci-lint

‎.github/workflows/third-party.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
run: |
4242
apk update
4343
apk add bash curl findutils gh git gnutar ${{ env.GO_RELEASE }} nodejs perl upx xz yara-x~${{ env.YARA_X_RELEASE }}
44-
- uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
44+
- uses: chainguard-dev/actions/setup-gitsign@4a81273c8653122cf4e48cc248f9073b660c5e6d
4545
- name: Set up Octo-STS
4646
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
4747
id: octo-sts

‎.github/workflows/update-yara-x.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
new_version: ${{ steps.check.outputs.new_version }}
2222
steps:
2323
- name: Harden Runner
24-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
24+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2525
with:
2626
egress-policy: block
2727
allowed-endpoints: >
@@ -91,7 +91,7 @@ jobs:
9191
pull-requests: write
9292
steps:
9393
- name: Harden Runner
94-
uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
94+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
9595
with:
9696
egress-policy: block
9797
allowed-endpoints: >
@@ -111,7 +111,7 @@ jobs:
111111
sum.golang.org:443
112112
tuf-repo-cdn.sigstore.dev:443
113113
114-
- uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
114+
- uses: chainguard-dev/actions/setup-gitsign@4a81273c8653122cf4e48cc248f9073b660c5e6d
115115
- name: Set up Octo-STS
116116
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
117117
id: octo-sts

‎.github/workflows/version.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
id-token: write
2727
pull-requests: write
2828
steps:
29-
- uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0
29+
- uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3030
with:
3131
egress-policy: block
3232
allowed-endpoints: >
@@ -39,7 +39,7 @@ jobs:
3939
rekor.sigstore.dev:443
4040
release-assets.githubusercontent.com:443
4141
tuf-repo-cdn.sigstore.dev:443
42-
- uses: chainguard-dev/actions/setup-gitsign@916fec00fb80f3cd124a0b41eef79ee63f607c5d
42+
- uses: chainguard-dev/actions/setup-gitsign@4a81273c8653122cf4e48cc248f9073b660c5e6d
4343
- name: Set up Octo-STS
4444
uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1
4545
id: octo-sts

0 commit comments

Comments
 (0)