From 7317a9340be7e83d8121e12022c8f1f1699accaf Mon Sep 17 00:00:00 2001 From: Taras Drozdovskyi Date: Fri, 3 May 2024 12:03:39 +0300 Subject: [PATCH] ci: Update 3rd-party components Signed-off-by: Taras Drozdovskyi --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/fossology.yml | 4 ++-- .github/workflows/license-finder.yml | 4 ++-- .github/workflows/linter.yml | 2 +- .github/workflows/publish.yml | 16 ++++++++-------- .github/workflows/scancode.yml | 4 ++-- .github/workflows/scorecards-analysis.yml | 6 +++--- 7 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index bac3e7fa..cf49c4f3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,7 +55,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1 + uses: github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -89,6 +89,6 @@ jobs: make - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1 + uses: github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/fossology.yml b/.github/workflows/fossology.yml index 6a709409..d4a47562 100644 --- a/.github/workflows/fossology.yml +++ b/.github/workflows/fossology.yml @@ -21,12 +21,12 @@ jobs: -e GITHUB_ACTIONS=true \ fossology/fossology:scanner "/bin/fossologyscanner" --report TEXT repo nomos ojo copyright keyword # Upload artifact - - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: scan-fossology-report path: ./results # Artifact download - - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: name: scan-fossology-report diff --git a/.github/workflows/license-finder.yml b/.github/workflows/license-finder.yml index 5cd156a3..0fc95fc4 100644 --- a/.github/workflows/license-finder.yml +++ b/.github/workflows/license-finder.yml @@ -20,12 +20,12 @@ jobs: license_finder > ./license-finder-report - name: Upload artifact - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: scan-license-finder-report path: ./license-finder-report - name: Artifact download - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: name: scan-license-finder-report diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index d6cfa2d9..2097ca82 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f - - uses: cpp-linter/cpp-linter-action@bbc213852a439498b38fa21ea5c698e852abd3f5 + - uses: cpp-linter/cpp-linter-action@a3ed7553c695735e6d1af356a0c0211a77d42c7b id: linter continue-on-error: true env: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ce71c5af..de9acd70 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 with: egress-policy: audit @@ -55,14 +55,14 @@ jobs: # echo "version=mtower-${VERSION:1}.bin" >> "$GITHUB_OUTPUT" - name: Upload build artifacts - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # tag=v3 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: ${{ steps.mtower_version.outputs.version }}_s.bin path: ./${{ steps.mtower_version.outputs.version }}_s.bin if-no-files-found: error - name: Upload build artifacts - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # tag=v3 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: ${{ steps.mtower_version.outputs.version }}_ns.bin path: ./${{ steps.mtower_version.outputs.version }}_ns.bin @@ -78,7 +78,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 with: egress-policy: audit @@ -96,7 +96,7 @@ jobs: actions: read # To read the workflow path. id-token: write # To sign the provenance. contents: write # To add assets to a release. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0 with: base64-subjects: "${{ needs.build.outputs.hashes }}" upload-assets: true # Optional: Upload to a new release @@ -111,17 +111,17 @@ jobs: if: startsWith(github.ref, 'refs/tags/') steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 with: egress-policy: audit - name: Download ${{ needs.build.outputs.version }}_s.bin - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: name: ${{ needs.build.outputs.version }}_s.bin - name: Download ${{ needs.build.outputs.version }}_ns.bin - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: name: ${{ needs.build.outputs.version }}_ns.bin diff --git a/.github/workflows/scancode.yml b/.github/workflows/scancode.yml index 19520275..3d552314 100644 --- a/.github/workflows/scancode.yml +++ b/.github/workflows/scancode.yml @@ -21,12 +21,12 @@ jobs: run: scancode -clpeui -n 2 --cyclonedx ./results/sbom-cyclonedx --spdx-rdf ./results/sbom-spdx ./ - name: Upload artifact - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: scan-scancode-report path: ./results/ - name: Artifact download - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 + uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: name: scan-scancode-report \ No newline at end of file diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 9715a7f9..d67fae99 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 + uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 with: egress-policy: audit @@ -64,7 +64,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 # v4.3.0 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 with: name: SARIF file path: results.sarif @@ -72,6 +72,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v2.1.27 + uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 with: sarif_file: results.sarif \ No newline at end of file