26.diff (2649B)
1 diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml 2 index ab40016f..b128db2f 100644 3 --- a/.github/workflows/renovate.yaml 4 +++ b/.github/workflows/renovate.yaml 5 @@ -35,10 +35,10 @@ jobs: 6 runs-on: ubuntu-latest 7 steps: 8 - name: Checkout 9 - uses: actions/checkout@v4 10 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 11 12 - name: Self-hosted Renovate 13 - uses: renovatebot/github-action@v40.1.12 14 + uses: renovatebot/github-action@5712c6a41dea6cdf32c72d92a763bd417e6606aa # v44.0.5 15 with: 16 configurationFile: .github/renovate.json 17 token: ${{ secrets.RENOVATE_TOKEN || secrets.GITHUB_TOKEN }} 18 diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml 19 index 74f8e5c9..f32b71bf 100644 20 --- a/.github/workflows/validate.yaml 21 +++ b/.github/workflows/validate.yaml 22 @@ -26,7 +26,7 @@ jobs: 23 runs-on: ubuntu-latest 24 steps: 25 - name: Checkout 26 - uses: actions/checkout@v4 27 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 28 29 - name: Setup Flux CLI 30 uses: fluxcd/flux2/action@main 31 @@ -69,7 +69,7 @@ jobs: 32 security-events: write 33 steps: 34 - name: Checkout 35 - uses: actions/checkout@v4 36 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 37 with: 38 fetch-depth: 0 39 40 @@ -125,7 +125,7 @@ jobs: 41 severity: "CRITICAL,HIGH" 42 43 - name: Upload Trivy results to GitHub Security 44 - uses: github/codeql-action/upload-sarif@v3 45 + uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4 46 if: always() 47 with: 48 sarif_file: "trivy-results.sarif" 49 @@ -138,7 +138,7 @@ jobs: 50 security-events: write 51 steps: 52 - name: Checkout 53 - uses: actions/checkout@v4 54 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 55 56 - name: Setup tools 57 run: | 58 @@ -167,7 +167,7 @@ jobs: 59 output: kubescape-results.sarif 60 61 - name: Upload Kubescape results to GitHub Security 62 - uses: github/codeql-action/upload-sarif@v3 63 + uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4 64 if: always() 65 with: 66 sarif_file: "kubescape-results.sarif" 67 @@ -177,7 +177,7 @@ jobs: 68 runs-on: ubuntu-latest 69 steps: 70 - name: Checkout 71 - uses: actions/checkout@v4 72 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6 73 74 - name: YAML Lint 75 uses: ibiqlik/action-yamllint@v3