Skip to content

Commit 160b75e

Browse files
authored
Merge branch 'advanced-security:main' into main
2 parents 129a993 + a0e88ed commit 160b75e

4 files changed

Lines changed: 6 additions & 6 deletions

File tree

.github/workflows/codeql-ql.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
uses: actions/checkout@v6
2222

2323
- name: "Set up Rust"
24-
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # v1.85.1
24+
uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # v1.85.1
2525
with:
2626
toolchain: stable
2727

.github/workflows/container-publish.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
type=semver,pattern=v{{major}}.{{minor}},value=${{ inputs.version }}
7373
7474
- name: Build & Publish Container ${{ env.IMAGE_NAME }}
75-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
75+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
7676
id: build
7777
with:
7878
file: "${{ inputs.container-file }}"
@@ -85,7 +85,7 @@ jobs:
8585

8686
# Upload Software Bill of Materials (SBOM) to GitHub
8787
- name: Upload SBOM
88-
uses: advanced-security/spdx-dependency-submission-action@f957edbb35161c1f9e33f61026fc86a671c58cae # v0.1.2
88+
uses: advanced-security/spdx-dependency-submission-action@169d22427d74f3faf93504e70b03eede8dab272a # v0.2.0
8989
with:
9090
filePath: '.'
9191
filePattern: '*.spdx.json'

.github/workflows/container-security.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
4747

4848
- name: Build Initial Container
49-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
49+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
5050
id: build
5151
with:
5252
file: "${{ inputs.container-file }}"
@@ -57,7 +57,7 @@ jobs:
5757

5858
# Scan the image for vulnerabilities
5959
- name: Run the Anchore / Grype scan action
60-
uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 # v7.3.1
60+
uses: anchore/scan-action@7037fa011853d5a11690026fb85feee79f4c946c # v7.3.2
6161
id: scan
6262
with:
6363
image: localbuild/testimage:latest

.github/workflows/release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
uses: actions/checkout@v6
3434

3535
- name: "Patch Release Me"
36-
uses: 42ByteLabs/patch-release-me@ef44b04c04fde87280adf14548664bfbcebba04d # 0.6.4
36+
uses: 42ByteLabs/patch-release-me@6cd166a460bc205b93c29acb6fef2aa275dc0502 # 0.6.5
3737
with:
3838
mode: ${{ github.event.inputs.bump }}
3939

0 commit comments

Comments
 (0)