File tree 7 files changed +17
-17
lines changed
7 files changed +17
-17
lines changed Original file line number Diff line number Diff line change @@ -29,17 +29,17 @@ jobs:
29
29
steps :
30
30
31
31
- name : Checkout repository
32
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
32
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
33
33
34
34
# Initializes the CodeQL tools for scanning.
35
35
- name : Initialize CodeQL
36
- uses : github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
36
+ uses : github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
37
37
with :
38
38
languages : ${{ matrix.language }}
39
39
- name : Autobuild
40
- uses : github/codeql-action/autobuild@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
40
+ uses : github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
41
41
42
42
- name : Perform CodeQL Analysis
43
- uses : github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
43
+ uses : github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
44
44
with :
45
45
category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change @@ -17,11 +17,11 @@ jobs:
17
17
runs-on : ubuntu-latest
18
18
steps :
19
19
- name : Harden Runner
20
- uses : step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
20
+ uses : step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
21
21
with :
22
22
egress-policy : audit
23
23
24
24
- name : ' Checkout Repository'
25
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
25
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
26
26
- name : ' Dependency Review'
27
27
uses : actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2
Original file line number Diff line number Diff line change 15
15
16
16
steps :
17
17
- name : Checkout
18
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
18
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
19
19
with :
20
20
fetch-depth : 0
21
21
Original file line number Diff line number Diff line change @@ -22,12 +22,12 @@ jobs:
22
22
23
23
steps :
24
24
- name : " Checkout code"
25
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
25
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
26
26
with :
27
27
persist-credentials : false
28
28
29
29
- name : " Run analysis"
30
- uses : ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
30
+ uses : ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
31
31
with :
32
32
results_file : results.sarif
33
33
results_format : sarif
45
45
46
46
# Upload the results to GitHub's code scanning dashboard.
47
47
- name : " Upload to code-scanning"
48
- uses : github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
48
+ uses : github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
49
49
with :
50
50
sarif_file : results.sarif
Original file line number Diff line number Diff line change 18
18
steps :
19
19
- name : Create release tag
20
20
id : tag
21
- uses : google-github-actions/release-please-action@a37ac6e4f6449ce8b3f7607e4d97d0146028dc0b # v4.1.0
21
+ uses : google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4.1.1
22
22
- id : release-flag
23
23
run : echo "release_created=${{ steps.tag.outputs.release_created || false }}" >> $GITHUB_OUTPUT
24
24
36
36
packages : write
37
37
38
38
steps :
39
- - uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
39
+ - uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
40
40
41
41
- name : Environment setup
42
42
uses : defenseunicorns/uds-common/.github/actions/setup@b2e8b25930c953ef893e7c787fe350f0d8679ee2 # v0.4.2
Original file line number Diff line number Diff line change 43
43
44
44
steps :
45
45
- name : Checkout repository
46
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
46
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
47
47
48
48
- name : Environment setup
49
49
uses : defenseunicorns/uds-common/.github/actions/setup@b2e8b25930c953ef893e7c787fe350f0d8679ee2 # v0.4.2
Original file line number Diff line number Diff line change 32
32
hooks :
33
33
- id : fix-smartquotes
34
34
- repo : https://github.com/python-jsonschema/check-jsonschema
35
- rev : 0.28.2
35
+ rev : 0.28.4
36
36
hooks :
37
37
- id : check-jsonschema
38
38
name : " Validate Zarf Configs Against Schema"
@@ -41,14 +41,14 @@ repos:
41
41
args :
42
42
[
43
43
" --schemafile" ,
44
- " https://raw.githubusercontent.com/defenseunicorns/zarf/v0.33.1 /zarf.schema.json" ,
44
+ " https://raw.githubusercontent.com/defenseunicorns/zarf/v0.33.2 /zarf.schema.json" ,
45
45
" --no-cache"
46
46
]
47
47
- repo : https://github.com/golangci/golangci-lint
48
- rev : v1.58.0
48
+ rev : v1.58.2
49
49
hooks :
50
50
- id : golangci-lint
51
51
- repo : https://github.com/renovatebot/pre-commit-hooks
52
- rev : 37.342.1
52
+ rev : 37.374.3
53
53
hooks :
54
54
- id : renovate-config-validator
You can’t perform that action at this time.
0 commit comments