Skip to content

Commit fd6d469

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group across 1 directory with 10 updates
Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` | | [blue-build/github-action](https://github.com/blue-build/github-action) | `1.11.1` | `1.12.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `6.3.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.4.0` | `6.5.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.35.2` | `4.36.3` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.35.2` | `4.36.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.35.2` | `4.36.3` | | [jasonn3/build-container-installer](https://github.com/jasonn3/build-container-installer) | `207e927e28c92704c4cdbe10b980643b3771ef01` | `40e24a530fec3ed7941a7034c1c4c3e359d3dd12` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.1.1` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.1` | Updates `actions/checkout` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...9c091bb) Updates `blue-build/github-action` from 1.11.1 to 1.12.0 - [Release notes](https://github.com/blue-build/github-action/releases) - [Changelog](https://github.com/blue-build/github-action/blob/main/CHANGELOG.md) - [Commits](blue-build/github-action@24d146d...836161e) Updates `actions/setup-python` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...ece7cb0) Updates `actions/setup-go` from 6.4.0 to 6.5.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@4a36011...924ae3a) Updates `github/codeql-action/init` from 4.35.2 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...54f647b) Updates `github/codeql-action/autobuild` from 4.35.2 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...54f647b) Updates `github/codeql-action/analyze` from 4.35.2 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...54f647b) Updates `jasonn3/build-container-installer` from 207e927e28c92704c4cdbe10b980643b3771ef01 to 40e24a530fec3ed7941a7034c1c4c3e359d3dd12 - [Release notes](https://github.com/jasonn3/build-container-installer/releases) - [Commits](JasonN3/build-container-installer@207e927...40e24a5) Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@a2bbfa2...0f67c3f) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@b430933...718ea10) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: blue-build/github-action dependency-version: 1.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: jasonn3/build-container-installer dependency-version: 40e24a530fec3ed7941a7034c1c4c3e359d3dd12 dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent d191e64 commit fd6d469

5 files changed

Lines changed: 56 additions & 56 deletions

File tree

‎.github/workflows/build.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
permissions:
2222
contents: read
2323
steps:
24-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
24+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2525

2626
- name: Validate committed wheelhouse
2727
run: |
@@ -118,7 +118,7 @@ jobs:
118118
steps:
119119
- name: Build Custom Image
120120
id: build
121-
uses: blue-build/github-action@24d146df25adc2cf579e918efe2d9bff6adea408 # v1.11.1
121+
uses: blue-build/github-action@836161eb076426a451e6a0054f722b1153b8b3ad # v1.12.0
122122
with:
123123
recipe: ${{ matrix.recipe }}
124124
cosign_private_key: ${{ secrets.SIGNING_SECRET }}
@@ -130,7 +130,7 @@ jobs:
130130
# Retry once on transient failures (COPR CDN 504s, rpm-ostree mirror flakes)
131131
- name: Retry build on transient failure
132132
if: failure() && steps.build.outcome == 'failure'
133-
uses: blue-build/github-action@24d146df25adc2cf579e918efe2d9bff6adea408 # v1.11.1
133+
uses: blue-build/github-action@836161eb076426a451e6a0054f722b1153b8b3ad # v1.12.0
134134
with:
135135
recipe: ${{ matrix.recipe }}
136136
cosign_private_key: ${{ secrets.SIGNING_SECRET }}
@@ -206,9 +206,9 @@ jobs:
206206
permissions:
207207
contents: read
208208
steps:
209-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
209+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
210210

211-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
211+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
212212
with:
213213
python-version: "3.12"
214214

‎.github/workflows/ci.yml‎

Lines changed: 29 additions & 29 deletions
Original file line numberDiff line numberDiff line change
@@ -24,8 +24,8 @@ jobs:
2424
matrix:
2525
service: [airlock, registry, tool-firewall, gpu-integrity-watch, mcp-firewall, policy-engine, runtime-attestor, integrity-monitor, incident-recorder]
2626
steps:
27-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
28-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
27+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
28+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
2929
with:
3030
go-version: "1.26.3"
3131
cache-dependency-path: services/${{ matrix.service }}/go.sum
@@ -48,8 +48,8 @@ jobs:
4848
permissions:
4949
contents: read
5050
steps:
51-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
52-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
51+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
52+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
5353
with:
5454
python-version: "3.12"
5555

@@ -123,7 +123,7 @@ jobs:
123123
permissions:
124124
contents: read
125125
steps:
126-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
126+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
127127

128128
- name: Lint shell scripts
129129
run: |
@@ -140,7 +140,7 @@ jobs:
140140
permissions:
141141
contents: read
142142
steps:
143-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
143+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
144144

145145
- name: Validate release helper scripts
146146
run: bash .github/scripts/check-release-installers.sh
@@ -151,8 +151,8 @@ jobs:
151151
permissions:
152152
contents: read
153153
steps:
154-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
155-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
154+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
155+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
156156
with:
157157
python-version: "3.12"
158158

@@ -180,8 +180,8 @@ jobs:
180180
permissions:
181181
contents: read
182182
steps:
183-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
184-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
183+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
184+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
185185
with:
186186
python-version: "3.12"
187187

@@ -211,7 +211,7 @@ jobs:
211211
permissions:
212212
contents: read
213213
steps:
214-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
214+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
215215
- name: Check for wrong image references
216216
run: |
217217
CANONICAL="ghcr.io/secai-hub/secai_os"
@@ -254,7 +254,7 @@ jobs:
254254
permissions:
255255
contents: read
256256
steps:
257-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
257+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
258258
- run: bash .github/scripts/check-action-pins.sh
259259
- run: bash .github/scripts/check-container-pins.sh
260260
- run: bash .github/scripts/check-eol.sh
@@ -265,8 +265,8 @@ jobs:
265265
permissions:
266266
contents: read
267267
steps:
268-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
269-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
268+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
269+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
270270
with:
271271
go-version: "1.26.3"
272272

@@ -401,9 +401,9 @@ jobs:
401401
permissions:
402402
contents: read
403403
steps:
404-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
404+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
405405

406-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
406+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
407407
with:
408408
python-version: "3.12"
409409

@@ -449,13 +449,13 @@ jobs:
449449
permissions:
450450
contents: read
451451
steps:
452-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
452+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
453453

454-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
454+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
455455
with:
456456
python-version: "3.12"
457457

458-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
458+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
459459
with:
460460
go-version: "1.26.3"
461461

@@ -483,13 +483,13 @@ jobs:
483483
permissions:
484484
contents: read
485485
steps:
486-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
486+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
487487

488-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
488+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
489489
with:
490490
go-version: "1.26.3"
491491

492-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
492+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
493493
with:
494494
python-version: "3.12"
495495

@@ -505,13 +505,13 @@ jobs:
505505
permissions:
506506
contents: read
507507
steps:
508-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
508+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
509509

510-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
510+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
511511
with:
512512
go-version: "1.26.3"
513513

514-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
514+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
515515
with:
516516
python-version: "3.12"
517517

@@ -568,7 +568,7 @@ jobs:
568568
permissions:
569569
contents: read
570570
steps:
571-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
571+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
572572

573573
- name: Check for broken internal links
574574
run: |
@@ -816,13 +816,13 @@ jobs:
816816
permissions:
817817
contents: read
818818
steps:
819-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
819+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
820820

821-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
821+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
822822
with:
823823
go-version: "1.26.3"
824824

825-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
825+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
826826
with:
827827
python-version: "3.12"
828828

‎.github/workflows/codeql.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -17,24 +17,24 @@ jobs:
1717
name: Analyze Go
1818
runs-on: ubuntu-latest
1919
steps:
20-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
21-
- uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
20+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
21+
- uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
2222
with:
2323
languages: go
24-
- uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
25-
- uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
24+
- uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
25+
- uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
2626
with:
2727
category: go
2828

2929
analyze-python:
3030
name: Analyze Python
3131
runs-on: ubuntu-latest
3232
steps:
33-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
34-
- uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
33+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
34+
- uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
3535
with:
3636
languages: python
37-
- uses: github/codeql-action/autobuild@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
38-
- uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
37+
- uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
38+
- uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
3939
with:
4040
category: python

‎.github/workflows/release.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
name: Release Preflight Check
2828
runs-on: ubuntu-latest
2929
steps:
30-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
30+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3131

3232
- name: Verify CI passed on this commit
3333
env:
@@ -83,8 +83,8 @@ jobs:
8383
matrix:
8484
service: [airlock, registry, tool-firewall, gpu-integrity-watch, mcp-firewall, policy-engine, runtime-attestor, integrity-monitor, incident-recorder]
8585
steps:
86-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
87-
- uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
86+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
87+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
8888
with:
8989
go-version: "1.26.3"
9090
cache-dependency-path: services/${{ matrix.service }}/go.sum
@@ -130,8 +130,8 @@ jobs:
130130
needs: [preflight]
131131
runs-on: ubuntu-latest
132132
steps:
133-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
134-
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
133+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
134+
- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
135135
with:
136136
python-version: "3.12"
137137

@@ -197,7 +197,7 @@ jobs:
197197
needs: [preflight]
198198
runs-on: ubuntu-latest
199199
steps:
200-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
200+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
201201

202202
- name: Build sandbox images required for VEX generation
203203
run: |
@@ -238,15 +238,15 @@ jobs:
238238
needs: [preflight]
239239
runs-on: ubuntu-latest
240240
steps:
241-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
241+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
242242

243243
- name: Free disk space
244244
run: |
245245
sudo rm -rf /usr/local/lib/android /usr/share/dotnet /opt/ghc
246246
sudo docker image prune -af
247247
248248
- name: Build ISO
249-
uses: jasonn3/build-container-installer@207e927e28c92704c4cdbe10b980643b3771ef01 # main
249+
uses: jasonn3/build-container-installer@40e24a530fec3ed7941a7034c1c4c3e359d3dd12 # main
250250
id: isogen
251251
with:
252252
arch: x86_64
@@ -297,7 +297,7 @@ jobs:
297297
needs: [preflight]
298298
runs-on: ubuntu-latest
299299
steps:
300-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
300+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
301301

302302
- name: Free disk space
303303
run: |
@@ -353,7 +353,7 @@ jobs:
353353
if: vars.HAS_KVM_RUNNER == 'true'
354354
runs-on: [self-hosted, linux, x64, kvm]
355355
steps:
356-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
356+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
357357

358358
- name: Build QCOW2
359359
run: |
@@ -396,7 +396,7 @@ jobs:
396396
runs-on: ubuntu-latest
397397
needs: [build-go, build-python, build-sandbox-vex, build-iso, build-usb-image]
398398
steps:
399-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
399+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
400400

401401
- name: Install cosign
402402
run: |
@@ -584,7 +584,7 @@ jobs:
584584
COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
585585

586586
- name: Attest build provenance
587-
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
587+
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
588588
with:
589589
subject-path: "dist/*-linux-*"
590590

@@ -606,7 +606,7 @@ jobs:
606606
607607
- name: Create GitHub Release (binaries + SBOMs + checksums)
608608
if: ${{ !inputs.dry_run }}
609-
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
609+
uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
610610
with:
611611
files: |
612612
dist/*-linux-*

‎.github/workflows/vm-boot-smoke.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
timeout-minutes: 30
3636

3737
steps:
38-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
38+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3939

4040
- name: Resolve image digest
4141
id: image

0 commit comments

Comments
 (0)