@@ -34,15 +34,15 @@ jobs:
3434 - name : Unshallow
3535 run : git fetch --prune --unshallow
3636 - name : Setup Go
37- uses : actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3 .0
37+ uses : actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4 .0
3838 with :
3939 go-version : 1.26.x
4040 - name : Setup Kustomize
4141 uses : fluxcd/pkg/actions/kustomize@main
4242 - name : Setup Flux
43- uses : fluxcd/flux2/action@871be9b40d53627786d3a3835a3ddba1e3234bd2 # v2.8.3
43+ uses : fluxcd/flux2/action@3cf3cb546fc549fa7e8a9ec6d3254accc027b46e # v2.8.4
4444 - name : Setup Syft
45- uses : anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
45+ uses : anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
4646 - name : Setup Node
4747 uses : actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
4848 with :
6666 id : buildx
6767 uses : docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
6868 - name : Login to GitHub Container Registry
69- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
69+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
7070 with :
7171 registry : ghcr.io
7272 username : ${{ github.actor }}
9393 tags : ${{ steps.meta.outputs.tags }}
9494 labels : ${{ steps.meta.outputs.labels }}
9595 build-args : " VERSION=${{ steps.prep.outputs.VERSION }}"
96- - uses : sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
96+ - uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
9797 - name : Sign images
9898 env :
9999 COSIGN_EXPERIMENTAL : 1
@@ -197,7 +197,7 @@ jobs:
197197 id : buildx
198198 uses : docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
199199 - name : Login to GitHub Container Registry
200- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
200+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
201201 with :
202202 registry : ghcr.io
203203 username : ${{ github.actor }}
@@ -224,7 +224,7 @@ jobs:
224224 tags : ${{ steps.meta.outputs.tags }}
225225 labels : ${{ steps.meta.outputs.labels }}
226226 build-args : " VERSION=${{ steps.prep.outputs.VERSION }}"
227- - uses : sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
227+ - uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
228228 with :
229229 cosign-release : v2.6.1 # TODO: remove after Flux 2.8 with support for cosign v3
230230 - name : Sign images
@@ -257,7 +257,7 @@ jobs:
257257 id : buildx
258258 uses : docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
259259 - name : Login to GitHub Container Registry
260- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
260+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
261261 with :
262262 registry : ghcr.io
263263 username : ${{ github.actor }}
@@ -284,7 +284,7 @@ jobs:
284284 tags : ${{ steps.meta.outputs.tags }}
285285 labels : ${{ steps.meta.outputs.labels }}
286286 build-args : " VERSION=${{ steps.prep.outputs.VERSION }}"
287- - uses : sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
287+ - uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
288288 with :
289289 cosign-release : v2.6.1 # TODO: remove after Flux 2.8 with support for cosign v3
290290 - name : Sign images
0 commit comments