From dcc3c0187ce2f10b6edeee240a99360042c7408e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 24 Oct 2024 16:47:01 +0200
Subject: [PATCH] Bump actions/checkout from 4.2.1 to 4.2.2 in the actions
 group (#506)

Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/github-sync-main-sigstore-conformance.yml | 2 +-
 .github/workflows/github-sync-main-sigstore.yml             | 2 +-
 .github/workflows/github-sync-pr-sigstore-conformance.yml   | 2 +-
 .github/workflows/github-sync-pr-sigstore.yml               | 2 +-
 .github/workflows/reusable-dependency-review.yml            | 2 +-
 .github/workflows/reusable-release.yml                      | 2 +-
 .github/workflows/reusable-scorecard.yml                    | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/github-sync-main-sigstore-conformance.yml b/.github/workflows/github-sync-main-sigstore-conformance.yml
index 756dce7..ebbc2f0 100644
--- a/.github/workflows/github-sync-main-sigstore-conformance.yml
+++ b/.github/workflows/github-sync-main-sigstore-conformance.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - uses: sigstore/github-sync@main
       if: ${{ inputs.preview }}
       with:
diff --git a/.github/workflows/github-sync-main-sigstore.yml b/.github/workflows/github-sync-main-sigstore.yml
index 1790312..f58456d 100644
--- a/.github/workflows/github-sync-main-sigstore.yml
+++ b/.github/workflows/github-sync-main-sigstore.yml
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - uses: sigstore/github-sync@main
       if: ${{ inputs.preview }}
       with:
diff --git a/.github/workflows/github-sync-pr-sigstore-conformance.yml b/.github/workflows/github-sync-pr-sigstore-conformance.yml
index 3b22f55..826deff 100644
--- a/.github/workflows/github-sync-pr-sigstore-conformance.yml
+++ b/.github/workflows/github-sync-pr-sigstore-conformance.yml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.github/workflows/github-sync-pr-sigstore.yml b/.github/workflows/github-sync-pr-sigstore.yml
index fd86b34..ff9d1df 100644
--- a/.github/workflows/github-sync-pr-sigstore.yml
+++ b/.github/workflows/github-sync-pr-sigstore.yml
@@ -21,7 +21,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         ref: ${{ github.event.pull_request.head.sha }}
 
diff --git a/.github/workflows/reusable-dependency-review.yml b/.github/workflows/reusable-dependency-review.yml
index be41a56..e33ae22 100644
--- a/.github/workflows/reusable-dependency-review.yml
+++ b/.github/workflows/reusable-dependency-review.yml
@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@a6993e2c61fd5dc440b409aa1d6904921c5e1894 # v4.3.5
         with:
diff --git a/.github/workflows/reusable-release.yml b/.github/workflows/reusable-release.yml
index d4c5910..83b08a1 100644
--- a/.github/workflows/reusable-release.yml
+++ b/.github/workflows/reusable-release.yml
@@ -46,7 +46,7 @@ jobs:
         run: exit 1
 
       - name: Checkout out repo
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           path: ./src/github.com/sigstore/${{ inputs.repo }}
 
diff --git a/.github/workflows/reusable-scorecard.yml b/.github/workflows/reusable-scorecard.yml
index 557a77c..cff14b4 100644
--- a/.github/workflows/reusable-scorecard.yml
+++ b/.github/workflows/reusable-scorecard.yml
@@ -33,7 +33,7 @@ jobs:
       # actions: read
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false