Skip to content

Commit bb6423b

Browse files
MisterMXMisterMX
committed
chore(ci): Bump github actions
Signed-off-by: Maximilian Blatt (external expert on behalf of DB Netz) <[email protected]>
1 parent 2a9ac2c commit bb6423b

File tree

5 files changed

+37
-105
lines changed

5 files changed

+37
-105
lines changed

‎.github/workflows/backport.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
if: github.event.pull_request.merged
2323
steps:
2424
- name: Checkout
25-
uses: actions/checkout@v2
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2626
with:
2727
fetch-depth: 0
2828

‎.github/workflows/ci.yml‎

Lines changed: 32 additions & 99 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
30+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3131
with:
3232
submodules: true
3333

3434
- name: Setup Go
35-
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
35+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
3636
with:
3737
go-version: ${{ env.GO_VERSION }}
38-
38+
3939
- name: Install goimports
4040
run: go install golang.org/x/tools/cmd/goimports
4141

@@ -44,14 +44,14 @@ jobs:
4444
run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
4545

4646
- name: Cache the Go Build Cache
47-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
47+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
4848
with:
4949
path: ${{ steps.go.outputs.cache }}
5050
key: ${{ runner.os }}-build-check-diff-${{ hashFiles('**/go.sum') }}
5151
restore-keys: ${{ runner.os }}-build-check-diff-
5252

5353
- name: Cache Go Dependencies
54-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
54+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
5555
with:
5656
path: .work/pkg
5757
key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -70,7 +70,7 @@ jobs:
7070
steps:
7171
- name: Detect No-op Changes
7272
id: noop
73-
uses: fkirc/skip-duplicate-actions@12aca0a884f6137d619d6a8a09fcc3406ced5281 # v5.3.0
73+
uses: fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
7474
with:
7575
github_token: ${{ secrets.GITHUB_TOKEN }}
7676
paths_ignore: '["**.md", "**.png", "**.jpg"]'
@@ -83,13 +83,13 @@ jobs:
8383
if: needs.detect-noop.outputs.noop != 'true'
8484
steps:
8585
- name: Checkout
86-
uses: actions/checkout@v2
86+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8787
with:
8888
submodules: true
8989

9090
- name: Get modified CRDs
9191
id: modified-crds
92-
uses: tj-actions/changed-files@v41
92+
uses: tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f # v45.0.6
9393
with:
9494
files: |
9595
package/crds/**
@@ -107,12 +107,12 @@ jobs:
107107

108108
steps:
109109
- name: Checkout
110-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
110+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
111111
with:
112112
submodules: true
113113

114114
- name: Setup Go
115-
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
115+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
116116
with:
117117
go-version: ${{ env.GO_VERSION }}
118118

@@ -121,14 +121,14 @@ jobs:
121121
run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
122122

123123
- name: Cache the Go Build Cache
124-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
124+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
125125
with:
126126
path: ${{ steps.go.outputs.cache }}
127127
key: ${{ runner.os }}-build-lint-${{ hashFiles('**/go.sum') }}
128128
restore-keys: ${{ runner.os }}-build-lint-
129129

130130
- name: Cache Go Dependencies
131-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
131+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
132132
with:
133133
path: .work/pkg
134134
key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -146,89 +146,22 @@ jobs:
146146
version: ${{ env.GOLANGCI_VERSION }}
147147
skip-cache: true # We do our own caching.
148148

149-
# Disabled for now because it takes a very long time to run and we are not
150-
# using the results anywhere.
151-
# codeql:
152-
# runs-on: ubuntu-22.04
153-
# needs: detect-noop
154-
# if: needs.detect-noop.outputs.noop != 'true'
155-
156-
# steps:
157-
# - name: Checkout
158-
# uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
159-
# with:
160-
# submodules: true
161-
162-
# - name: Setup Go
163-
# uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
164-
# with:
165-
# go-version: ${{ env.GO_VERSION }}
166-
167-
# - name: Find the Go Build Cache
168-
# id: go
169-
# run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
170-
171-
# - name: Cache the Go Build Cache
172-
# uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
173-
# with:
174-
# path: ${{ steps.go.outputs.cache }}
175-
# key: ${{ runner.os }}-build-check-diff-${{ hashFiles('**/go.sum') }}
176-
# restore-keys: ${{ runner.os }}-build-check-diff-
177-
178-
# - name: Cache Go Dependencies
179-
# uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
180-
# with:
181-
# path: .work/pkg
182-
# key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
183-
# restore-keys: ${{ runner.os }}-pkg-
184-
185-
# - name: Vendor Dependencies
186-
# run: make vendor vendor.check
187-
188-
# - name: Initialize CodeQL
189-
# uses: github/codeql-action/init@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2
190-
# with:
191-
# languages: go
192-
193-
# - name: Perform CodeQL Analysis
194-
# uses: github/codeql-action/analyze@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2
195-
196-
trivy-scan-fs:
197-
runs-on: ubuntu-22.04
198-
needs: detect-noop
199-
if: needs.detect-noop.outputs.noop != 'true'
200-
steps:
201-
- name: Checkout
202-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
203-
with:
204-
submodules: true
205-
206-
- name: Run Trivy vulnerability scanner in fs mode
207-
uses: aquasecurity/trivy-action@fbd16365eb88e12433951383f5e99bd901fc618f # 0.12.0
208-
with:
209-
scan-type: 'fs'
210-
ignore-unfixed: true
211-
skip-dirs: design
212-
scan-ref: '.'
213-
exit-code: '1'
214-
severity: 'CRITICAL,HIGH'
215-
216149
unit-tests:
217150
runs-on: ubuntu-22.04
218151
needs: detect-noop
219152
if: needs.detect-noop.outputs.noop != 'true'
220153

221154
steps:
222155
- name: Checkout
223-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
156+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
224157
with:
225158
submodules: true
226159

227160
- name: Fetch History
228161
run: git fetch --prune --unshallow
229162

230163
- name: Setup Go
231-
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
164+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
232165
with:
233166
go-version: ${{ env.GO_VERSION }}
234167

@@ -237,14 +170,14 @@ jobs:
237170
run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
238171

239172
- name: Cache the Go Build Cache
240-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
173+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
241174
with:
242175
path: ${{ steps.go.outputs.cache }}
243176
key: ${{ runner.os }}-build-unit-tests-${{ hashFiles('**/go.sum') }}
244177
restore-keys: ${{ runner.os }}-build-unit-tests-
245178

246179
- name: Cache Go Dependencies
247-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
180+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
248181
with:
249182
path: .work/pkg
250183
key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -268,26 +201,26 @@ jobs:
268201
if: needs.detect-noop.outputs.noop != 'true'
269202
steps:
270203
- name: Setup QEMU
271-
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
204+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
272205
with:
273206
platforms: all
274207

275208
- name: Setup Docker Buildx
276-
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3
209+
uses: docker/setup-buildx-action@04eaa7c789c15c7207d36583e7d86cd37d837034 # v3.8.0
277210
with:
278211
version: ${{ env.DOCKER_BUILDX_VERSION }}
279212
install: true
280213

281214
- name: Checkout
282-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
215+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
283216
with:
284217
submodules: true
285218

286219
- name: Fetch History
287220
run: git fetch --prune --unshallow
288221

289222
- name: Setup Go
290-
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
223+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
291224
with:
292225
go-version: ${{ env.GO_VERSION }}
293226

@@ -296,14 +229,14 @@ jobs:
296229
run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
297230

298231
- name: Cache the Go Build Cache
299-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
232+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
300233
with:
301234
path: ${{ steps.go.outputs.cache }}
302235
key: ${{ runner.os }}-build-e2e-tests-${{ hashFiles('**/go.sum') }}
303236
restore-keys: ${{ runner.os }}-build-e2e-tests-
304237

305238
- name: Cache Go Dependencies
306-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
239+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
307240
with:
308241
path: .work/pkg
309242
key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -330,7 +263,7 @@ jobs:
330263

331264
steps:
332265
- name: Cleanup Disk
333-
uses: jlumbroso/free-disk-space@d5af243ce7bacb67384aa6c5b1fc5f169e30903e
266+
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be #v1.3.1
334267
with:
335268
android: true
336269
dotnet: true
@@ -340,26 +273,26 @@ jobs:
340273
swap-storage: false
341274

342275
- name: Setup QEMU
343-
uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
276+
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
344277
with:
345278
platforms: all
346279

347280
- name: Setup Docker Buildx
348-
uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3
281+
uses: docker/setup-buildx-action@04eaa7c789c15c7207d36583e7d86cd37d837034 # v3.8.0
349282
with:
350283
version: ${{ env.DOCKER_BUILDX_VERSION }}
351284
install: true
352285

353286
- name: Checkout
354-
uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
287+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
355288
with:
356289
submodules: true
357290

358291
- name: Fetch History
359292
run: git fetch --prune --unshallow
360293

361294
- name: Setup Go
362-
uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4
295+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
363296
with:
364297
go-version: ${{ env.GO_VERSION }}
365298

@@ -368,14 +301,14 @@ jobs:
368301
run: echo "cache=$(make go.cachedir)" >> $GITHUB_OUTPUT
369302

370303
- name: Cache the Go Build Cache
371-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
304+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
372305
with:
373306
path: ${{ steps.go.outputs.cache }}
374307
key: ${{ runner.os }}-build-publish-artifacts-${{ hashFiles('**/go.sum') }}
375308
restore-keys: ${{ runner.os }}-build-publish-artifacts-
376309

377310
- name: Cache Go Dependencies
378-
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3
311+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
379312
with:
380313
path: .work/pkg
381314
key: ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -392,20 +325,20 @@ jobs:
392325
BUILD_ARGS: "--load"
393326

394327
- name: Publish Artifacts to GitHub
395-
uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
328+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
396329
with:
397330
name: output
398331
path: _output/**
399332

400333
- name: Login to DockerHub
401-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
334+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
402335
if: env.CONTRIB_DOCKER_USR != ''
403336
with:
404337
username: ${{ secrets.CONTRIB_DOCKER_USR }}
405338
password: ${{ secrets.CONTRIB_DOCKER_PSW }}
406339

407340
- name: Login to Upbound
408-
uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
341+
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
409342
if: env.XPKG_ACCESS_ID != ''
410343
with:
411344
registry: xpkg.upbound.io

‎.github/workflows/commands.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@ jobs:
8080
permission-level: write
8181

8282
- name: Checkout
83-
uses: actions/checkout@v2
83+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8484
with:
8585
fetch-depth: 0
8686

‎.github/workflows/promote.yml‎

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@v2
30+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3131
with:
3232
submodules: true
3333

@@ -54,4 +54,3 @@ jobs:
5454
CHANNEL: ${{ github.event.inputs.channel }}
5555
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_USR }}
5656
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_PSW }}
57-

‎.github/workflows/tag.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@ jobs:
1616

1717
steps:
1818
- name: Checkout
19-
uses: actions/checkout@v2
19+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2020

2121
- name: Create Tag
2222
uses: negz/create-tag@v1
2323
with:
2424
version: ${{ github.event.inputs.version }}
2525
message: ${{ github.event.inputs.message }}
26-
token: ${{ secrets.GITHUB_TOKEN }}
26+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)