File tree Expand file tree Collapse file tree 9 files changed +219
-214
lines changed Expand file tree Collapse file tree 9 files changed +219
-214
lines changed Original file line number Diff line number Diff line change @@ -15,7 +15,7 @@ name: Build/Push Image and Release Charts
15
15
permissions : read-all
16
16
jobs :
17
17
setenv :
18
- uses : ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@b8742370cb1539c1edb9ad5b8f479f121980587f
18
+ uses : ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@f4838576b2f6cc71062002313e23e7be5c636158
19
19
with :
20
20
gh_head_ref : ${{ github.head_ref }}
21
21
gh_ref_name : ${{ github.ref_name }}
27
27
permissions :
28
28
id-token : write
29
29
contents : write
30
- uses : ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@b8742370cb1539c1edb9ad5b8f479f121980587f
30
+ uses : ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@f4838576b2f6cc71062002313e23e7be5c636158
31
31
needs : setenv
32
32
with :
33
33
gh_repository_owner : ${{ github.repository_owner }}
44
44
permissions :
45
45
security-events : write
46
46
statuses : write
47
- uses : ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@b8742370cb1539c1edb9ad5b8f479f121980587f
47
+ uses : ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@f4838576b2f6cc71062002313e23e7be5c636158
48
48
needs :
49
49
- setenv
50
50
- release
56
56
helm :
57
57
permissions :
58
58
contents : write
59
- uses : ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@b8742370cb1539c1edb9ad5b8f479f121980587f
59
+ uses : ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@f4838576b2f6cc71062002313e23e7be5c636158
60
60
needs :
61
61
- setenv
62
62
- release
76
76
GPG_KEY : ${{ secrets.GPG_KEY }}
77
77
gh_token : ${{ secrets.HELM_INDEXER_TOKEN }}
78
78
sbom :
79
- uses : ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@b8742370cb1539c1edb9ad5b8f479f121980587f
79
+ uses : ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@f4838576b2f6cc71062002313e23e7be5c636158
80
80
needs :
81
81
- setenv
82
82
- release
Original file line number Diff line number Diff line change @@ -26,14 +26,14 @@ jobs:
26
26
egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
27
27
28
28
- name : Checkout repository
29
- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
29
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
30
30
31
31
- name : Initialize CodeQL
32
- uses : github/codeql-action/init@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
32
+ uses : github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
33
33
with :
34
34
languages : " python"
35
35
36
36
- name : Perform CodeQL Analysis
37
- uses : github/codeql-action/analyze@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
37
+ uses : github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
38
38
with :
39
39
category : " /language:python"
Original file line number Diff line number Diff line change 30
30
egress-policy : audit
31
31
32
32
- name : Checkout Code
33
- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
33
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
34
34
with :
35
35
token : ${{ secrets.PAT || secrets.GITHUB_TOKEN }}
36
36
fetch-depth : 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
40
40
id : ml
41
41
# You can override MegaLinter flavor used to have faster performances
42
42
# More info at https://megalinter.io/flavors/
43
- uses : oxsecurity/megalinter/flavors/python@c217fe8f7bc9207062a084e989bd97efd56e7b9a # v8.0 .0
43
+ uses : oxsecurity/megalinter/flavors/python@d8c95fc6f2237031fb9e9322b0f97100168afa6e # v8.2 .0
44
44
env :
45
45
# All available variables are described in documentation
46
46
# https://megalinter.io/configuration/
51
51
# Upload MegaLinter artifacts
52
52
- name : Archive production artifacts
53
53
if : ${{ success() || failure() }}
54
- uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
54
+ uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
55
55
with :
56
56
name : MegaLinter reports
57
57
path : |
Original file line number Diff line number Diff line change 31
31
egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
32
32
33
33
- name : " Checkout code"
34
- uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
34
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
35
35
with :
36
36
persist-credentials : false
37
37
44
44
45
45
# Upload the results to GitHub's code scanning dashboard.
46
46
- name : " Upload to code-scanning"
47
- uses : github/codeql-action/upload-sarif@294a9d92911152fe08befb9ec03e240add280cb3 # v3.26.8
47
+ uses : github/codeql-action/upload-sarif@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # v3.27.4
48
48
with :
49
49
sarif_file : results.sarif
Original file line number Diff line number Diff line change 12
12
# See the License for the specific language governing permissions and
13
13
# limitations under the License.
14
14
# hadolint global ignore=DL3041,DL3013,DL4006
15
- FROM public.ecr.aws/amazonlinux/amazonlinux:2023.5.20240916 .0@sha256:feeb91e31912e7b3739d9cee4bc2181262f54688bc4fbd21069f3cedce03fa4f
15
+ FROM public.ecr.aws/amazonlinux/amazonlinux:2023.6.20241111 .0@sha256:5faca3faac3f514a7b8da1801caf87acec0b53623675de4c72f346fa4d1790ea
16
16
17
17
COPY . /app
18
18
WORKDIR /app
You can’t perform that action at this time.
0 commit comments