@@ -39,21 +39,19 @@ jobs:
39
39
# https://github.com/sigstore/cosign-installer
40
40
- name : Install cosign
41
41
if : github.event_name != 'pull_request'
42
- uses : sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 # v3.1.1
43
- with :
44
- cosign-release : ' v2.1.1'
42
+ uses : sigstore/cosign-installer@v3.5.0
45
43
46
44
# Set up BuildKit Docker container builder to be able to build
47
45
# multi-platform images and export cache
48
46
# https://github.com/docker/setup-buildx-action
49
47
- name : Set up Docker Buildx
50
- uses : docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
48
+ uses : docker/setup-buildx-action@v3
51
49
52
50
# Login against a Docker registry except on PR
53
51
# https://github.com/docker/login-action
54
52
- name : Log into registry ${{ env.REGISTRY }}
55
53
if : github.event_name != 'pull_request'
56
- uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
54
+ uses : docker/login-action@v3
57
55
with :
58
56
registry : ${{ env.REGISTRY }}
59
57
username : ${{ github.actor }}
@@ -63,15 +61,15 @@ jobs:
63
61
# https://github.com/docker/metadata-action
64
62
- name : Extract Docker metadata
65
63
id : meta
66
- uses : docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
64
+ uses : docker/metadata-action@v5
67
65
with :
68
66
images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
69
67
70
68
# Build and push Docker image with Buildx (don't push on PR)
71
69
# https://github.com/docker/build-push-action
72
70
- name : Build and push Docker image
73
71
id : build-and-push
74
- uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
72
+ uses : docker/build-push-action@v5
75
73
with :
76
74
context : .
77
75
push : ${{ github.event_name != 'pull_request' }}
0 commit comments