132.diff (3886B)
1 diff --git a/.github/workflows/build-blog.yaml b/.github/workflows/build-blog.yaml 2 index ad47e37f..7557d72e 100644 3 --- a/.github/workflows/build-blog.yaml 4 +++ b/.github/workflows/build-blog.yaml 5 @@ -57,7 +57,7 @@ jobs: 6 7 - name: Build and push 8 id: build 9 - uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 10 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 11 with: 12 context: apps/talos_cluster/blog/docker 13 file: apps/talos_cluster/blog/docker/Dockerfile 14 diff --git a/.github/workflows/build-bookwyrm.yaml b/.github/workflows/build-bookwyrm.yaml 15 index f716bf18..3120fe45 100644 16 --- a/.github/workflows/build-bookwyrm.yaml 17 +++ b/.github/workflows/build-bookwyrm.yaml 18 @@ -110,7 +110,7 @@ jobs: 19 20 - name: Build and push 21 id: build 22 - uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 23 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 24 with: 25 context: . 26 push: true 27 diff --git a/.github/workflows/build-continuwuity.yaml b/.github/workflows/build-continuwuity.yaml 28 index 0e16af96..47163777 100644 29 --- a/.github/workflows/build-continuwuity.yaml 30 +++ b/.github/workflows/build-continuwuity.yaml 31 @@ -60,7 +60,7 @@ jobs: 32 33 - name: Build and push 34 id: build 35 - uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 36 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 37 with: 38 context: apps/talos_cluster/continuwuity 39 file: apps/talos_cluster/continuwuity/Dockerfile 40 diff --git a/.github/workflows/build-mediawiki.yaml b/.github/workflows/build-mediawiki.yaml 41 index 13d33ede..56716c2a 100644 42 --- a/.github/workflows/build-mediawiki.yaml 43 +++ b/.github/workflows/build-mediawiki.yaml 44 @@ -92,7 +92,7 @@ jobs: 45 46 - name: Build and push 47 id: build 48 - uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7 49 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 50 with: 51 context: apps/talos_cluster/mediawiki 52 file: apps/talos_cluster/mediawiki/Dockerfile 53 diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml 54 index f5f91a05..cb991bc4 100644 55 --- a/.github/workflows/validate.yaml 56 +++ b/.github/workflows/validate.yaml 57 @@ -31,7 +31,7 @@ jobs: 58 persist-credentials: false 59 60 - name: Setup Flux CLI 61 - uses: fluxcd/flux2/action@c432d380dda02377556e18e13289c63933e444c6 # main 62 + uses: fluxcd/flux2/action@7d27a26665b34463b0ed5fb54fa06642375536f9 # main 63 64 - name: Setup tools 65 run: | 66 @@ -115,7 +115,7 @@ jobs: 67 cat /tmp/images_final.txt 68 69 - name: Run Trivy vulnerability scanner 70 - uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # master 71 + uses: aquasecurity/trivy-action@876cf04c63f65e9799bcf1043b584e72469c7143 # master 72 with: 73 scan-type: "config" 74 scan-ref: "." 75 @@ -124,7 +124,7 @@ jobs: 76 severity: "CRITICAL,HIGH" 77 78 - name: Upload Trivy results to GitHub Security 79 - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4 80 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4 81 if: always() 82 with: 83 sarif_file: "trivy-results.sarif" 84 @@ -189,7 +189,7 @@ jobs: 85 fi 86 87 - name: Upload Kubescape results to GitHub Security 88 - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4 89 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4 90 if: always() 91 with: 92 sarif_file: "results.sarif"