|
28 | 28 | contents: read |
29 | 29 | steps: |
30 | 30 | - name: Checkout code |
31 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 31 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
32 | 32 | with: |
33 | 33 | fetch-depth: 0 # Full history for SonarCloud |
34 | 34 |
|
|
58 | 58 | contents: read |
59 | 59 | steps: |
60 | 60 | - name: Checkout code |
61 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 61 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
62 | 62 |
|
63 | 63 | - name: Run GitLeaks (secrets detection) |
64 | 64 | uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0 |
|
78 | 78 | limit-severities-for-sarif: true |
79 | 79 |
|
80 | 80 | - name: Upload Trivy results to GitHub Security |
81 | | - uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v3.28.1 |
| 81 | + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.28.1 |
82 | 82 | if: always() && hashFiles('trivy-results.sarif') != '' |
83 | 83 | with: |
84 | 84 | sarif_file: 'trivy-results.sarif' |
@@ -119,7 +119,7 @@ jobs: |
119 | 119 | julia-version: ['1.12', 'nightly'] |
120 | 120 | steps: |
121 | 121 | - name: Checkout code |
122 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 122 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
123 | 123 |
|
124 | 124 | - name: Set up Julia ${{ matrix.julia-version }} |
125 | 125 | uses: julia-actions/setup-julia@fa02766e078afaaf09b14210362cee14137e6a32 # v2.8.0 |
@@ -157,7 +157,7 @@ jobs: |
157 | 157 | contents: read |
158 | 158 | steps: |
159 | 159 | - name: Checkout code |
160 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 160 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
161 | 161 |
|
162 | 162 | - name: Install Rust toolchain |
163 | 163 | uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 |
@@ -208,14 +208,14 @@ jobs: |
208 | 208 | attestations: write |
209 | 209 | steps: |
210 | 210 | - name: Checkout code |
211 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 211 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
212 | 212 |
|
213 | 213 | - name: Set up Docker Buildx |
214 | 214 | uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 |
215 | 215 |
|
216 | 216 | - name: Log in to Container Registry |
217 | 217 | if: github.event_name != 'pull_request' |
218 | | - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 |
| 218 | + uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 |
219 | 219 | with: |
220 | 220 | registry: ${{ env.REGISTRY }} |
221 | 221 | username: ${{ github.actor }} |
@@ -257,7 +257,7 @@ jobs: |
257 | 257 | limit-severities-for-sarif: true |
258 | 258 |
|
259 | 259 | - name: Upload Trivy image results |
260 | | - uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v3.28.1 |
| 260 | + uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.28.1 |
261 | 261 | if: always() && hashFiles('trivy-image-results.sarif') != '' |
262 | 262 | with: |
263 | 263 | sarif_file: 'trivy-image-results.sarif' |
@@ -304,7 +304,7 @@ jobs: |
304 | 304 | contents: read |
305 | 305 | steps: |
306 | 306 | - name: Checkout code |
307 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 307 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
308 | 308 | with: |
309 | 309 | fetch-depth: 0 |
310 | 310 |
|
@@ -362,7 +362,7 @@ jobs: |
362 | 362 |
|
363 | 363 | steps: |
364 | 364 | - name: Checkout code |
365 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 365 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
366 | 366 |
|
367 | 367 | - name: Set up Julia |
368 | 368 | uses: julia-actions/setup-julia@fa02766e078afaaf09b14210362cee14137e6a32 # v2.8.0 |
@@ -398,7 +398,7 @@ jobs: |
398 | 398 | url: https://robot-vacuum.example.com |
399 | 399 | steps: |
400 | 400 | - name: Checkout code |
401 | | - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 401 | + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
402 | 402 |
|
403 | 403 | - name: Deploy to production |
404 | 404 | run: | |
|
0 commit comments