Skip to content

Commit c308a17

Browse files
dependabot[bot]J12934
dependabot[bot]
authored and
J12934
committed
Bump the github-actions-version-updates group across 1 directory with 3 updates
Bumps the github-actions-version-updates group with 3 updates in the /.github/workflows directory: [github/codeql-action](https://github.com/github/codeql-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [mikefarah/yq](https://github.com/mikefarah/yq). Updates `github/codeql-action` from 4.32.2 to 4.32.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@45cbd0c...9e907b5) Updates `docker/build-push-action` from 6.18.0 to 6.19.2 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@2634353...10e90e3) Updates `mikefarah/yq` from 4.52.2 to 4.52.4 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@2be0094...5a7e72a) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-version-updates - dependency-name: docker/build-push-action dependency-version: 6.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-version-updates - dependency-name: mikefarah/yq dependency-version: 4.52.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 525ed26 commit c308a17

3 files changed

Lines changed: 17 additions & 17 deletions

File tree

‎.github/workflows/oss-scorecard.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,6 @@ jobs:
3333

3434
# Upload the results to GitHub's code scanning dashboard.
3535
- name: "Upload to code-scanning"
36-
uses: github/codeql-action/upload-sarif@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2 # v4.32.2
36+
uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
3737
with:
3838
sarif_file: results.sarif

‎.github/workflows/release-build.yaml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ jobs:
5454
password: ${{ secrets.DOCKER_TOKEN }}
5555

5656
- name: Build and Push
57-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
57+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
5858
with:
5959
context: ./${{ matrix.component }}
6060
file: ./${{ matrix.component }}/Dockerfile
@@ -101,7 +101,7 @@ jobs:
101101
password: ${{ secrets.DOCKER_TOKEN }}
102102

103103
- name: Build and Push
104-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
104+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
105105
with:
106106
context: ./auto-discovery/kubernetes/
107107
file: ./auto-discovery/kubernetes/Dockerfile
@@ -148,7 +148,7 @@ jobs:
148148
password: ${{ secrets.DOCKER_TOKEN }}
149149

150150
- name: Build and Push
151-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
151+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
152152
with:
153153
context: ./auto-discovery/kubernetes/pull-secret-extractor
154154
file: ./auto-discovery/kubernetes/pull-secret-extractor/Dockerfile
@@ -201,7 +201,7 @@ jobs:
201201
password: ${{ secrets.DOCKER_TOKEN }}
202202

203203
- name: Build and Push
204-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
204+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
205205
with:
206206
context: ./${{ matrix.sdk }}/nodejs
207207
file: ./${{ matrix.sdk }}/nodejs/Dockerfile
@@ -258,7 +258,7 @@ jobs:
258258
echo "baseImageTag=sha-$(git rev-parse --short HEAD)" >> $GITHUB_ENV
259259
260260
- name: Build and Push
261-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
261+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
262262
with:
263263
context: ./hooks/${{ matrix.hook }}/hook
264264
file: ./hooks/${{ matrix.hook }}/hook/Dockerfile
@@ -306,7 +306,7 @@ jobs:
306306
password: ${{ secrets.DOCKER_TOKEN }}
307307

308308
- name: Build and Push
309-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
309+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
310310
with:
311311
context: ./hooks/persistence-elastic/dashboard-importer/
312312
file: ./hooks/persistence-elastic/dashboard-importer/Dockerfile
@@ -374,7 +374,7 @@ jobs:
374374
echo "baseImageTag=sha-$(git rev-parse --short HEAD)" >> $GITHUB_ENV
375375
376376
- name: Build and Push
377-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
377+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
378378
with:
379379
context: ./scanners/${{ matrix.parser }}/parser
380380
file: ./scanners/${{ matrix.parser }}/parser/Dockerfile
@@ -425,15 +425,15 @@ jobs:
425425
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
426426

427427
- name: Set ENV Var with Scanner Version
428-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
428+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
429429
# Notice: The current version of the scanner is provided via the Chart.yaml to ensure
430430
# there is only one place to edit the version of a scanner
431431
with:
432432
cmd: echo scannerVersion=$(yq e .appVersion scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
433433

434434
# extract the supported cpu architectures from the Chart.yaml
435435
- name: Set ENV Var with Supported Platforms
436-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
436+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
437437
with:
438438
cmd: echo supportedPlatforms=$(yq e .annotations.supported-platforms scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
439439

@@ -456,7 +456,7 @@ jobs:
456456
password: ${{ secrets.DOCKER_TOKEN }}
457457

458458
- name: Build and Push
459-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
459+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
460460
with:
461461
context: ./scanners/${{ matrix.scanner }}/scanner
462462
file: ./scanners/${{ matrix.scanner }}/scanner/Dockerfile
@@ -517,7 +517,7 @@ jobs:
517517
echo "baseImageTag=sha-$(git rev-parse --short HEAD)" >> $GITHUB_ENV
518518
519519
- name: Build and Push
520-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
520+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
521521
with:
522522
context: ./scanners/${{ matrix.scanner }}/scanner
523523
file: ./scanners/${{ matrix.scanner }}/scanner/Dockerfile
@@ -555,7 +555,7 @@ jobs:
555555
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
556556

557557
- name: Set ENV Var with Demo-Target Version
558-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
558+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
559559
# Notice: The current version of the demo-target is provided via the Chart.yaml to ensure
560560
# there is only one place to edit the version of a scanner
561561
with:
@@ -581,7 +581,7 @@ jobs:
581581
password: ${{ secrets.DOCKER_TOKEN }}
582582

583583
- name: Build and Push
584-
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
584+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
585585
with:
586586
context: ./demo-targets/${{ matrix.target }}/container
587587
file: ./demo-targets/${{ matrix.target }}/container/Dockerfile

‎.github/workflows/scb-bot.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -61,14 +61,14 @@ jobs:
6161
# Fetching scanner version from local chart .appVersion attribute
6262
# this would look like 1.1.1 or v1.1.1 depending on the corresponding Docker image tag
6363
- name: Fetch local scanner version
64-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
64+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
6565
with:
6666
cmd: echo local=$(yq e .appVersion scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
6767

6868
# Fetching scanner version API from local chart .annotations.versionApi attribute
6969
# This would look like https://api.github.com/repos/projectdiscovery/nuclei/releases/latest
7070
- name: Fetch scanner's version API
71-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
71+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
7272
with:
7373
cmd: echo versionApi=$(yq e .annotations.versionApi scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
7474

@@ -143,7 +143,7 @@ jobs:
143143
144144
- name: Upgrade Scanner Helm Chart
145145
if: ${{ env.release != env.local && env.prExists == 0 && env.release != null}}
146-
uses: mikefarah/yq@2be0094729a1006f61e8339ce9934bfb3cbb549f # v4.52.2
146+
uses: mikefarah/yq@5a7e72a743649b1b3a47d1a1d8214f3453173c51 # v4.52.4
147147
with:
148148
# appVersion value in chart is replaced with release value. Empty lines are deleted in the process
149149
cmd: yq e --inplace '.appVersion = "${{env.release}}"' ./scanners/${{ matrix.scanner }}/Chart.yaml

0 commit comments

Comments
 (0)