diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index aa313f2..0c2517f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,7 +39,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3 + uses: github/codeql-action/init@df5a14dc28094dc936e103b37d749c6628682b60 # v3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -50,7 +50,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3 + uses: github/codeql-action/autobuild@df5a14dc28094dc936e103b37d749c6628682b60 # v3 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -64,4 +64,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3 + uses: github/codeql-action/analyze@df5a14dc28094dc936e103b37d749c6628682b60 # v3 diff --git a/Dockerfile b/Dockerfile index a231bf0..c551890 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,7 +29,7 @@ RUN apk add --update --no-cache ca-certificates ## docker build --no-cache --target gcloud -t vela-kubernetes:gcloud . ## ############################################################################# -FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:93bcd078e0bcd0063a30b4b9f8a695a6299a832cf8bb721be17589cf4bc1a8f1 as gcloud +FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:e9328fdee872bbe56e1f24138b5c471266a971bd578f2ad1abb5a15c47460903 as gcloud RUN gcloud components install gke-gcloud-auth-plugin