diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cf9bae254..f546f07da 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -65,7 +65,7 @@ jobs: e2e_hardened: ${{ steps.diff.outputs.e2e_hardened }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 @@ -213,7 +213,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -227,7 +227,7 @@ jobs: run: make semgrep-ci - name: Install Trivy (safe pinned release) - uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.6 + uses: aquasecurity/setup-trivy@81e514348e19b6112ce2a7e3ecbafe19c1e1f567 # v0.3.1 with: version: v0.69.3 @@ -253,7 +253,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -284,13 +284,13 @@ jobs: image_ref: local/openbao-upgrade-pr-scan:${{ github.sha }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Build image run: make ${{ matrix.build_target }} IMG="${{ matrix.image_ref }}" - name: Install Trivy (safe pinned release) - uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.6 + uses: aquasecurity/setup-trivy@81e514348e19b6112ce2a7e3ecbafe19c1e1f567 # v0.3.1 with: version: v0.69.3 @@ -312,7 +312,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -336,7 +336,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -371,7 +371,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -386,7 +386,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -401,7 +401,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -418,7 +418,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -435,7 +435,7 @@ jobs: GOFLAGS: -mod=vendor steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -454,7 +454,7 @@ jobs: GOFLAGS: -mod=vendor steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -473,7 +473,7 @@ jobs: FUZZ_ARTIFACT_DIR: dist/fuzz steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -502,7 +502,7 @@ jobs: timeout-minutes: 25 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -521,7 +521,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Build docs uses: ./.github/actions/docs-build @@ -533,7 +533,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 @@ -583,7 +583,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -615,7 +615,7 @@ jobs: if: needs.changes.outputs.chart == 'true' steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -642,7 +642,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -676,7 +676,7 @@ jobs: upgrade_executor_ref: ${{ steps.refs.outputs.upgrade_executor_ref }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Download Binaries uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 @@ -801,7 +801,7 @@ jobs: matrix: ${{ steps.plan.outputs.matrix }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -840,7 +840,7 @@ jobs: KIND_NODE_IMAGE: ${{ matrix.kind_node_image }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Determine E2E Filter id: filter @@ -1155,7 +1155,7 @@ jobs: upgrade_executor_image: ${{ steps.vars.outputs.upgrade_executor_image }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 15a7a962a..656b8fe82 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Dependency review uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 diff --git a/.github/workflows/ghcr-housekeeping.yml b/.github/workflows/ghcr-housekeeping.yml index f573b5c97..b6ce41ee2 100644 --- a/.github/workflows/ghcr-housekeeping.yml +++ b/.github/workflows/ghcr-housekeeping.yml @@ -28,7 +28,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index fcf709578..05e206d08 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -50,7 +50,7 @@ jobs: runs-on: &runner ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -64,7 +64,7 @@ jobs: run: make semgrep-ci - name: Install Trivy (safe pinned release) - uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.6 + uses: aquasecurity/setup-trivy@81e514348e19b6112ce2a7e3ecbafe19c1e1f567 # v0.3.1 with: version: v0.69.3 @@ -89,7 +89,7 @@ jobs: timeout-minutes: 40 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -112,7 +112,7 @@ jobs: FUZZ_ARTIFACT_DIR: dist/fuzz steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -138,7 +138,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -171,7 +171,7 @@ jobs: upgrade_executor_ref: ${{ steps.refs.outputs.upgrade_executor_ref }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Download Binaries uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 @@ -289,7 +289,7 @@ jobs: profile: ${{ steps.profile.outputs.value }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Determine E2E profile id: profile @@ -367,7 +367,7 @@ jobs: KIND_NODE_IMAGE: ${{ matrix.kind_node_image }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -483,7 +483,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Build docs uses: ./.github/actions/docs-build @@ -493,7 +493,7 @@ jobs: runs-on: *runner steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup repo tools uses: ./.github/actions/setup-repo-tools @@ -536,7 +536,7 @@ jobs: upgrade_executor_image: ${{ steps.vars.outputs.upgrade_executor_image }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 9169c744f..3995fd486 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -21,7 +21,7 @@ jobs: name: github-pages steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 diff --git a/.github/workflows/perf-baseline-capture.yml b/.github/workflows/perf-baseline-capture.yml index c31f803eb..18e36f2ff 100644 --- a/.github/workflows/perf-baseline-capture.yml +++ b/.github/workflows/perf-baseline-capture.yml @@ -103,7 +103,7 @@ jobs: scenario: ${{ fromJson(needs.plan.outputs.scenarios) }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 diff --git a/.github/workflows/perf-weekly.yml b/.github/workflows/perf-weekly.yml index 882c571f6..b3a62225c 100644 --- a/.github/workflows/perf-weekly.yml +++ b/.github/workflows/perf-weekly.yml @@ -30,7 +30,7 @@ jobs: - rolling-upgrade steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 @@ -78,7 +78,7 @@ jobs: if: ${{ always() }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 diff --git a/.github/workflows/prepare-release-as-pr.yml b/.github/workflows/prepare-release-as-pr.yml index 8a1fca6ba..25f0f85f4 100644 --- a/.github/workflows/prepare-release-as-pr.yml +++ b/.github/workflows/prepare-release-as-pr.yml @@ -56,7 +56,7 @@ jobs: permission-issues: write - name: Checkout target branch - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ inputs.target_branch }} fetch-depth: 0 diff --git a/.github/workflows/publish-edge.yml b/.github/workflows/publish-edge.yml index 0e6d767a3..b8bc841f6 100644 --- a/.github/workflows/publish-edge.yml +++ b/.github/workflows/publish-edge.yml @@ -176,7 +176,7 @@ jobs: UPGRADE_EXECUTOR_DIGEST: ${{ needs.load-candidate.outputs.upgrade_executor_digest }} steps: - name: Checkout trusted workflow helper sources - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.workflow_sha }} path: .github-workflow-src @@ -373,7 +373,7 @@ jobs: UPGRADE_EXECUTOR_DIGEST: ${{ needs.load-candidate.outputs.upgrade_executor_digest }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 diff --git a/.github/workflows/publish-nightly.yml b/.github/workflows/publish-nightly.yml index e8b4f7bcd..a8cdc4a58 100644 --- a/.github/workflows/publish-nightly.yml +++ b/.github/workflows/publish-nightly.yml @@ -179,7 +179,7 @@ jobs: UPGRADE_EXECUTOR_DIGEST: ${{ needs.load-candidate.outputs.upgrade_executor_digest }} steps: - name: Checkout trusted workflow helper sources - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.workflow_sha }} path: .github-workflow-src @@ -382,7 +382,7 @@ jobs: UPGRADE_EXECUTOR_DIGEST: ${{ needs.load-candidate.outputs.upgrade_executor_digest }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 20af9d957..205dbd6f4 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout for release-only guard if: ${{ github.event_name == 'push' }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 @@ -96,7 +96,7 @@ jobs: - name: Check out release PR branch if: ${{ steps.release-artifact-guard.outputs.skip_release_please != 'true' && steps.release.outputs.prs_created == 'true' }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: token: ${{ steps.app-token.outputs.token }} fetch-depth: 0 diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 90ea9c441..2766aacd4 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -46,7 +46,7 @@ jobs: permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref_name }} fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index de3bf4997..41251462c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,7 +33,7 @@ jobs: upgrade_executor_image: ${{ steps.vars.outputs.upgrade_executor_image }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} fetch-depth: 1 @@ -142,7 +142,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} @@ -185,7 +185,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Install Trivy (safe pinned release) - uses: aquasecurity/setup-trivy@3fb12ec12f41e471780db15c232d5dd185dcb514 # v0.2.6 + uses: aquasecurity/setup-trivy@81e514348e19b6112ce2a7e3ecbafe19c1e1f567 # v0.3.1 with: version: v0.69.3 @@ -209,7 +209,7 @@ jobs: matrix: ${{ steps.matrix.outputs.matrix }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} @@ -252,7 +252,7 @@ jobs: UPGRADE_EXECUTOR_REF: ${{ needs.prepare.outputs.upgrade_executor_image }}:${{ needs.prepare.outputs.build_tag }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} @@ -376,7 +376,7 @@ jobs: contents: read steps: - name: Checkout release ref - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} fetch-depth: 1 @@ -403,7 +403,7 @@ jobs: packages: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} fetch-depth: 0 @@ -722,7 +722,7 @@ jobs: attestations: write steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} fetch-depth: 0 @@ -1017,7 +1017,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.ref }} fetch-depth: 0 diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml index 85023a427..283062df6 100644 --- a/.github/workflows/reusable-build.yml +++ b/.github/workflows/reusable-build.yml @@ -89,7 +89,7 @@ jobs: exit 1 - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ inputs.ref }} fetch-depth: 0 diff --git a/.github/workflows/reusable-channel-hardening.yml b/.github/workflows/reusable-channel-hardening.yml index b12d4ce61..915874fa5 100644 --- a/.github/workflows/reusable-channel-hardening.yml +++ b/.github/workflows/reusable-channel-hardening.yml @@ -119,7 +119,7 @@ jobs: contents: read steps: - name: Checkout workflow helper sources - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.workflow_sha }} path: .github-workflow-src @@ -148,14 +148,14 @@ jobs: packages: read steps: - name: Checkout source ref - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ inputs.ref }} path: source-under-test fetch-depth: 0 - name: Checkout workflow helper sources - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.workflow_sha }} path: .github-workflow-src diff --git a/.github/workflows/trusted-root-refresh.yml b/.github/workflows/trusted-root-refresh.yml index fb7776c53..39c1541b7 100644 --- a/.github/workflows/trusted-root-refresh.yml +++ b/.github/workflows/trusted-root-refresh.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Setup Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0