Skip to content

Commit

Permalink
chore(deps): update github-actions
Browse files Browse the repository at this point in the history
  • Loading branch information
renovate-bot committed Oct 4, 2022
1 parent 9dc6318 commit 7d2b847
Show file tree
Hide file tree
Showing 17 changed files with 57 additions and 57 deletions.
6 changes: 3 additions & 3 deletions .github/actions/checkout-go/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ runs:
# 2. if inputs.ref == ''
- name: Checkout the repository with user ref
if: inputs.ref != ''
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
with:
fetch-depth: 1
persist-credentials: false
Expand All @@ -49,15 +49,15 @@ runs:

- name: Checkout the repository with default ref
if: inputs.ref == ''
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
with:
fetch-depth: 1
persist-credentials: false
repository: "${{ inputs.repository }}"
token: "${{ inputs.token }}"

- name: Verify checkout
uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@9dc6318aedc3d24ede4e946966d30c752769a4f9

- name: Set up Go environment
uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3.3.0
Expand Down
8 changes: 4 additions & 4 deletions .github/actions/checkout-node/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ runs:
# 2. if inputs.ref == ''
- name: Checkout the repository with user ref
if: inputs.ref != ''
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
with:
fetch-depth: 1
persist-credentials: false
Expand All @@ -49,17 +49,17 @@ runs:

- name: Checkout the repository with default ref
if: inputs.ref == ''
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0
with:
fetch-depth: 1
persist-credentials: false
repository: "${{ inputs.repository }}"
token: "${{ inputs.token }}"

- name: Verify checkout
uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/verify-checkout@9dc6318aedc3d24ede4e946966d30c752769a4f9

- name: Set up Node environment
uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1
uses: actions/setup-node@969bd2663942d722d85b6a8626225850c2f7be4b # tag=v3.5.0
with:
node-version: "${{ inputs.node-version }}"
4 changes: 2 additions & 2 deletions .github/actions/generate-builder/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ runs:
using: "composite"
steps:
- name: Checkout the Go builder repository
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
repository: "${{ inputs.repository }}"
ref: "${{ inputs.ref }}"
Expand Down Expand Up @@ -62,7 +62,7 @@ runs:
run: ./.github/actions/generate-builder/generate-builder.sh

- name: Compute sha256 of builder
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@9dc6318aedc3d24ede4e946966d30c752769a4f9
id: compute
with:
path: "${{ inputs.binary }}"
2 changes: 1 addition & 1 deletion .github/actions/secure-download-artifact/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ runs:

- name: Compute the hash
id: compute
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
path: "${{ inputs.path }}"

Expand Down
2 changes: 1 addition & 1 deletion .github/actions/secure-upload-artifact/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ runs:
steps:
- name: Compute binary hash
id: compute-digest
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/compute-sha256@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
path: "${{ inputs.path }}"

Expand Down
22 changes: 11 additions & 11 deletions .github/workflows/builder_go_slsa3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check private repos
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
override: ${{ inputs.private-repository }}
Expand All @@ -86,7 +86,7 @@ jobs:
steps:
- name: Generate random 16-byte value (32-char hex encoded)
id: rng
uses: slsa-framework/slsa-github-generator/.github/actions/rng@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/rng@9dc6318aedc3d24ede4e946966d30c752769a4f9

detect-env:
outputs:
Expand All @@ -113,7 +113,7 @@ jobs:
steps:
- name: Generate builder
id: generate
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
repository: "${{ needs.detect-env.outputs.repository }}"
ref: "${{ needs.detect-env.outputs.ref }}"
Expand Down Expand Up @@ -146,12 +146,12 @@ jobs:
needs: [privacy-check, builder, rng]
steps:
- name: Checkout the Go repository
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
go-version: ${{ inputs.go-version }}

- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down Expand Up @@ -183,12 +183,12 @@ jobs:
needs: [privacy-check, builder, build-dry, rng]
steps:
- name: Checkout the Go repository
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/checkout-go@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
go-version: ${{ inputs.go-version }}

- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down Expand Up @@ -232,7 +232,7 @@ jobs:
- name: Upload generated binary
id: upload
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.build-dry.outputs.go-binary-name }}"
path: "${{ needs.build-dry.outputs.go-binary-name }}"
Expand All @@ -254,7 +254,7 @@ jobs:
go-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
steps:
- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down Expand Up @@ -305,14 +305,14 @@ jobs:
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
steps:
- name: Download binary
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.build-dry.outputs.go-binary-name }}"
path: "${{ needs.build-dry.outputs.go-binary-name }}"
sha256: "${{ needs.build.outputs.go-binary-sha256 }}"

- name: Download provenance
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.provenance.outputs.go-provenance-name }}"
path: "${{ needs.provenance.outputs.go-provenance-name }}"
Expand Down
18 changes: 9 additions & 9 deletions .github/workflows/builder_node_slsa3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check private repos
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
override: ${{ inputs.private-repository }}
Expand All @@ -145,7 +145,7 @@ jobs:
steps:
- name: Generate random 16-byte value (32-char hex encoded)
id: rng
uses: slsa-framework/slsa-github-generator/.github/actions/rng@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/rng@9dc6318aedc3d24ede4e946966d30c752769a4f9

detect-env:
outputs:
Expand All @@ -172,7 +172,7 @@ jobs:
steps:
- name: Generate builder
id: generate
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
repository: "${{ needs.detect-env.outputs.repository }}"
ref: "${{ needs.detect-env.outputs.ref }}"
Expand Down Expand Up @@ -213,7 +213,7 @@ jobs:
cache: 'npm'

- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down Expand Up @@ -269,7 +269,7 @@ jobs:
- name: Upload generated tarball
id: upload
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-upload-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ steps.tarball.outputs.filename }}"
path: "${{ steps.tarball.outputs.filename }}"
Expand All @@ -291,7 +291,7 @@ jobs:
node-provenance-sha256: ${{ steps.sign-prov.outputs.signed-provenance-sha256 }}
steps:
- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down Expand Up @@ -350,21 +350,21 @@ jobs:
registry-url: ${{ inputs.registry-url }}

- name: Download binary
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.build.outputs.node-tarball-name }}"
path: "${{ needs.build.outputs.node-tarball-name }}"
sha256: "${{ needs.build.outputs.node-tarball-sha256 }}"

- name: Download provenance
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.provenance.outputs.node-provenance-name }}"
path: "${{ needs.provenance.outputs.node-provenance-name }}"
sha256: "${{ needs.provenance.outputs.node-provenance-sha256 }}"

- name: Download builder
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ env.BUILDER_BINARY }}-${{ needs.rng.outputs.value }}"
path: "${{ env.BUILDER_BINARY }}"
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/codeql-analysis.yml
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,11 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2
uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # tag=v3.1.0

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@b398f525a5587552e573b247ac661067fafa920b # tag=v2.1.22
uses: github/codeql-action/init@e0e5ded33cabb451ae0a9768fc7b0410bad9ad44 # tag=v2.1.26
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand All @@ -57,7 +57,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
uses: github/codeql-action/autobuild@b398f525a5587552e573b247ac661067fafa920b # tag=v2.1.22
uses: github/codeql-action/autobuild@e0e5ded33cabb451ae0a9768fc7b0410bad9ad44 # tag=v2.1.26

# Command-line programs to run using the OS shell.
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
Expand All @@ -70,4 +70,4 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@b398f525a5587552e573b247ac661067fafa920b # tag=v2.1.22
uses: github/codeql-action/analyze@e0e5ded33cabb451ae0a9768fc7b0410bad9ad44 # tag=v2.1.26
8 changes: 4 additions & 4 deletions .github/workflows/generator_container_slsa3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check private repos
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
override: ${{ inputs.private-repository }}
Expand All @@ -71,7 +71,7 @@ jobs:
steps:
- name: Detect the generator ref
id: detect
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@9dc6318aedc3d24ede4e946966d30c752769a4f9

# generator builds the generator binary and runs it to generate SLSA
# provenance.
Expand All @@ -91,7 +91,7 @@ jobs:
packages: write # Needed to login and upload attestations to ghcr.io.
steps:
- name: Generate builder
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
repository: "${{ needs.detect-env.outputs.repository }}"
ref: "${{ needs.detect-env.outputs.ref }}"
Expand All @@ -101,7 +101,7 @@ jobs:
# NOTE: We are using the generic generator.
directory: "${{ env.BUILDER_DIR }}"

- uses: sigstore/cosign-installer@f3c664df7af409cb4873aa5068053ba9d61a57b6 # tag=v2.6.0
- uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76 # tag=v2.7.0
- name: Login
env:
UNTRUSTED_IMAGE: "${{ inputs.image }}"
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/generator_generic_slsa3.yml
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check private repos
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@a3c7a56c8749c2c423f01bbcfd063315efc07a22
uses: slsa-framework/slsa-github-generator/.github/actions/privacy-check@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
error_message: "Repository is private. The workflow has halted in order to keep the repository name from being exposed in the public transparency log. Set 'private-repository' to override."
override: ${{ inputs.private-repository }}
Expand All @@ -85,7 +85,7 @@ jobs:
steps:
- name: Detect the generator ref
id: detect
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/detect-workflow@9dc6318aedc3d24ede4e946966d30c752769a4f9

# generator builds the generator binary and runs it to generate SLSA
# provenance.
Expand All @@ -108,7 +108,7 @@ jobs:
actions: read # Needed to read workflow info.
steps:
- name: Generate builder
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/generate-builder@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
repository: "${{ needs.detect-env.outputs.repository }}"
ref: "${{ needs.detect-env.outputs.ref }}"
Expand Down Expand Up @@ -169,7 +169,7 @@ jobs:
if: startsWith(github.ref, 'refs/tags/') && inputs.upload-assets == true
steps:
- name: Download the provenance
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@e3220805577deb9d193f64e519abcb3b50851df5
uses: slsa-framework/slsa-github-generator/.github/actions/secure-download-artifact@9dc6318aedc3d24ede4e946966d30c752769a4f9
with:
name: "${{ needs.generator.outputs.provenance-name }}"
path: "${{ needs.generator.outputs.provenance-name }}"
Expand Down
Loading

0 comments on commit 7d2b847

Please sign in to comment.