@@ -25,11 +25,11 @@ jobs:
2525 steps :
2626
2727 - name : Checkout repository
28- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
28+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
2929 # https://github.com/actions/checkout/releases/tag/v4.1.1
3030
3131 - name : Setup Go
32- uses : actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0 .0
32+ uses : actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5 .0
3333 # https://github.com/actions/setup-go/releases/tag/v5.0.0
3434 with :
3535 go-version-file : ' go.mod'
5151
5252 - name : Upload artifacts
5353 # https://github.com/actions/upload-artifact/commit/65462800fd760344b1a7b4382951275a0abb4808
54- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808
54+ uses : actions/upload-artifact@2848b2cda0e5190984587ec6bb1f36730ca78d50
5555 with :
5656 name : webhook-artifacts-${{ matrix.arch }}
5757 path : |
@@ -66,20 +66,20 @@ jobs:
6666
6767 - name : Checkout repository
6868 # https://github.com/actions/checkout/releases/tag/v4.1.1
69- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
69+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
7070
7171 - name : package-helm
7272 run : ./scripts/package-helm
7373
7474 - name : Download the amd64 artifacts
75- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
75+ uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
7676 # https://github.com/actions/download-artifact/releases/tag/v4.1.7
7777 with :
7878 name : webhook-artifacts-amd64
7979 path : dist/artifacts
8080
8181 - name : Download the arm64 artifacts
82- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
82+ uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
8383 # https://github.com/actions/download-artifact/releases/tag/v4.1.7
8484 with :
8585 name : webhook-artifacts-arm64
@@ -113,10 +113,10 @@ jobs:
113113 steps :
114114 - name : Checkout repository
115115 # https://github.com/actions/checkout/releases/tag/v4.1.1
116- uses : actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
116+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
117117
118118 - name : Download the artifacts
119- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
119+ uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
120120 # https://github.com/actions/download-artifact/releases/tag/v4.1.7
121121 with :
122122 name : webhook-artifacts-${{ matrix.arch }}
@@ -137,15 +137,15 @@ jobs:
137137
138138 - name : Set up QEMU
139139 # https://github.com/docker/setup-qemu-action/releases/tag/v3.1.0
140- uses : docker/setup-qemu-action@5927c834f5b4fdf503fca6f4c7eccda82949e1ee # v3.1 .0
140+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6 .0
141141
142142 - name : Set up Docker Buildx
143- uses : docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4 # v3.4.0
143+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
144144 # https://github.com/docker/setup-buildx-action/releases/tag/v3.4.0
145145
146146 - name : Log in to the Container registry
147147 # https://github.com/docker/login-action/releases/tag/v3.2.0
148- uses : docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2 .0
148+ uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6 .0
149149 with :
150150 registry : ${{ env.REGISTRY }}
151151 username : ${{ env.DOCKER_USERNAME }}
@@ -154,7 +154,7 @@ jobs:
154154 - name : Build and push the webhook image
155155 id : build
156156 # https://github.com/docker/build-push-action/releases/tag/v6.3.0
157- uses : docker/build-push-action@1a162644f9a7e87d8f4b053101d1d9a712edc18c # v6.3 .0
157+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18 .0
158158 with :
159159 context : .
160160 file : ./package/Dockerfile
@@ -168,7 +168,7 @@ jobs:
168168 touch "/tmp/digests/${digest#sha256:}"
169169
170170 - name : Upload digest
171- uses : actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
171+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
172172 # https://github.com/actions/upload-artifact/releases/tag/v4.3.3
173173 with :
174174 name : digests-${{ matrix.arch }}
@@ -183,15 +183,15 @@ jobs:
183183 needs : image
184184 steps :
185185 - name : Download digests
186- uses : actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
186+ uses : actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
187187 # https://github.com/actions/download-artifact/releases/tag/v4.1.7
188188 with :
189189 path : /tmp/digests
190190 pattern : digests-*
191191 merge-multiple : true
192192
193193 - name : Set up Docker Buildx
194- uses : docker/setup-buildx-action@4fd812986e6c8c2a69e18311145f9371337f27d4 # v3.4.0
194+ uses : docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
195195 # https://github.com/docker/setup-buildx-action/releases/tag/v3.4.0
196196
197197 - name : " Read vault secrets"
@@ -202,7 +202,7 @@ jobs:
202202 secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD
203203
204204 - name : Log in to the Container registry
205- uses : docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2 .0
205+ uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6 .0
206206 # https://github.com/docker/login-action/releases/tag/v3.2.0
207207 with :
208208 registry : ${{ env.REGISTRY }}
0 commit comments