External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

chore(deps): bump the actions group with 5 updates (#508)

Browse Source 
Bumps 5 GitHub Actions via Dependabot. All 17 checks green.
This commit is contained in:
dependabot[bot]
2026-07-17 10:58:28 +08:00
committed by GitHub
parent 8dcfd55745
commit 80330a8b07
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/attest.yml
+3 -3
View File
@@ -33,14 +33,14 @@ jobs:
contents: read contents: read
steps: steps:
- name: Attest GHCR image - name: Attest GHCR image
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2 uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
with: with:
subject-name: ghcr.io/snapotter-hq/snapotter subject-name: ghcr.io/snapotter-hq/snapotter
subject-digest: ${{ inputs.image_digest }} subject-digest: ${{ inputs.image_digest }}
push-to-registry: false push-to-registry: false
- name: Attest Docker Hub image - name: Attest Docker Hub image
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2 uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
with: with:
subject-name: docker.io/snapotter/snapotter subject-name: docker.io/snapotter/snapotter
subject-digest: ${{ inputs.image_digest }} subject-digest: ${{ inputs.image_digest }}
@@ -64,6 +64,6 @@ jobs:
ls -l snapotter-v*-linux-*.tar.gz ls -l snapotter-v*-linux-*.tar.gz
- name: Attest archives - name: Attest archives
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2 uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
with: with:
subject-path: "snapotter-v*-linux-*.tar.gz" subject-path: "snapotter-v*-linux-*.tar.gz"
.github/workflows/codeql.yml
+3 -3
View File
@@ -24,12 +24,12 @@ jobs:
steps: steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
- uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3 - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
with: with:
languages: ${{ matrix.language }} languages: ${{ matrix.language }}
- uses: github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3 - uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
- uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3 - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
with: with:
category: "/language:${{ matrix.language }}" category: "/language:${{ matrix.language }}"
.github/workflows/release.yml
+1 -1
View File
@@ -835,7 +835,7 @@ jobs:
severity: "CRITICAL,HIGH" severity: "CRITICAL,HIGH"
- name: Upload SARIF - name: Upload SARIF
uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3 uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v3
if: always() if: always()
with: with:
sarif_file: "trivy-results.sarif" sarif_file: "trivy-results.sarif"