File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 5858 # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5959 steps :
6060 - name : Checkout repository
61- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
61+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
6262
6363 # Add any setup steps before running the `github/codeql-action/init` action.
6464 # This includes steps like installing compilers or runtimes (`actions/setup-node`
Original file line number Diff line number Diff line change 2424 digests : ${{ steps.hash.outputs.digests }}
2525
2626 steps :
27- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
27+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2828
2929 # ========================================================
3030 #
6161 actions : read # To read the workflow path.
6262 id-token : write # To sign the provenance.
6363 contents : write # To add assets to a release.
64- uses : slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4 .0
64+ uses : slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1 .0
6565 with :
6666 base64-subjects : " ${{ needs.build.outputs.digests }}"
6767 upload-assets : true # Optional: Upload to a new release
Original file line number Diff line number Diff line change @@ -105,7 +105,7 @@ jobs:
105105 echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
106106
107107name : Upload findings artifact
108- uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
108+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
109109 with :
110110 name : hypatia-findings
111111 path : hypatia-findings.json
@@ -381,7 +381,7 @@ jobs:
381381 # the pull-requests: write permission above: a token/API hiccup or
382382 # a fork PR (read-only token) skips the comment, not the check.
383383 continue-on-error : true
384- uses : actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
384+ uses : actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v7
385385 with :
386386 script : |
387387 const fs = require('fs');
Original file line number Diff line number Diff line change 1616 runs-on : ubuntu-latest
1717 steps :
1818 - name : Trigger Propagation
19- uses : peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3
19+ uses : peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
2020 with :
2121 token : ${{ secrets.FARM_DISPATCH_TOKEN }}
2222 repository : hyperpolymath/.git-private-farm
Original file line number Diff line number Diff line change @@ -28,16 +28,16 @@ jobs:
2828 runs-on : ubuntu-latest
2929 steps :
3030 - name : Checkout
31- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
31+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3232 - name : Setup Pages
33- uses : actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
33+ uses : actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
3434 - name : Build with Jekyll
3535 uses : actions/jekyll-build-pages@44a6e6beabd48582f863aeeb6cb2151cc1716697 # v1
3636 with :
3737 source : ./
3838 destination : ./_site
3939 - name : Upload artifact
40- uses : actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
40+ uses : actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
4141
4242 # Deployment job
4343 deploy :
4949 steps :
5050 - name : Deploy to GitHub Pages
5151 id : deployment
52- uses : actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
52+ uses : actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
Original file line number Diff line number Diff line change @@ -19,12 +19,12 @@ jobs:
1919
2020 steps :
2121 - name : Checkout
22- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
22+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323 with :
2424 fetch-depth : 0
2525
2626 - name : Setup SSH
27- uses : webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9 .0
27+ uses : webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10 .0
2828 with :
2929 ssh-private-key : ${{ secrets.GITLAB_SSH_KEY }}
3030
@@ -49,12 +49,12 @@ jobs:
4949
5050 steps :
5151 - name : Checkout
52- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
52+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5353 with :
5454 fetch-depth : 0
5555
5656 - name : Setup SSH
57- uses : webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9 .0
57+ uses : webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10 .0
5858 with :
5959 ssh-private-key : ${{ secrets.BITBUCKET_SSH_KEY }}
6060
Original file line number Diff line number Diff line change 66 build :
77 runs-on : ubuntu-latest
88 steps :
9- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
10- - uses : denoland/setup-deno@v1
9+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
10+ - uses : denoland/setup-deno@v2
1111 with :
1212 deno-version : v1.x
1313
3333 security :
3434 runs-on : ubuntu-latest
3535 steps :
36- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
37- - uses : denoland/setup-deno@v1
36+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
37+ - uses : denoland/setup-deno@v2
3838 - name : Check permissions
3939 run : |
4040 # Audit for dangerous permissions
Original file line number Diff line number Diff line change @@ -26,12 +26,12 @@ jobs:
2626 security-events : write
2727 id-token : write # For OIDC
2828 steps :
29- - uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
29+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3030 with :
3131 persist-credentials : false
3232
3333 - name : Run Scorecard
34- uses : ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
34+ uses : ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
3535 with :
3636 results_file : results.sarif
3737 results_format : sarif
6161 check-critical :
6262 runs-on : ubuntu-latest
6363 steps :
64- - uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
64+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
6565
6666 - name : Check SECURITY.md exists
6767 run : |
Original file line number Diff line number Diff line change @@ -23,12 +23,12 @@ jobs:
2323 security-events : write
2424 id-token : write
2525 steps :
26- - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
26+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2727 with :
2828 persist-credentials : false
2929
3030 - name : Run Scorecard
31- uses : ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
31+ uses : ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
3232 with :
3333 results_file : results.sarif
3434 results_format : sarif
Original file line number Diff line number Diff line change 2121 trufflehog :
2222 runs-on : ubuntu-latest
2323 steps :
24- - uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
24+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2525 with :
2626 fetch-depth : 0 # Full history for scanning
2727
3535 gitleaks :
3636 runs-on : ubuntu-latest
3737 steps :
38- - uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
38+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3939 with :
4040 fetch-depth : 0
4141
4949 runs-on : ubuntu-latest
5050 if : hashFiles('**/Cargo.toml') != ''
5151 steps :
52- - uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
52+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5353
5454 - name : Check for hardcoded secrets in Rust
5555 run : |
You can’t perform that action at this time.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
0 commit comments