From 95b901c074fc309f4d1530240339ece7e550d748 Mon Sep 17 00:00:00 2001 From: Taras Drozdovskyi Date: Thu, 8 Aug 2024 13:53:51 +0300 Subject: [PATCH] ci: Update 3rd-party components Signed-off-by: Taras Drozdovskyi --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/fossology.yml | 2 +- .github/workflows/license-finder.yml | 2 +- .github/workflows/linter.yml | 2 +- .github/workflows/publish.yml | 10 +++++----- .github/workflows/scancode.yml | 2 +- .github/workflows/scorecards-analysis.yml | 6 +++--- 7 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f84126e0..7b443760 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,7 +55,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a + uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -89,6 +89,6 @@ jobs: make - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a + uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/fossology.yml b/.github/workflows/fossology.yml index 69412469..2e53d34a 100644 --- a/.github/workflows/fossology.yml +++ b/.github/workflows/fossology.yml @@ -21,7 +21,7 @@ jobs: -e GITHUB_ACTIONS=true \ fossology/fossology:scanner "/bin/fossologyscanner" --report TEXT repo nomos ojo copyright keyword # Upload artifact - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: scan-fossology-report path: ./results diff --git a/.github/workflows/license-finder.yml b/.github/workflows/license-finder.yml index 0813253d..750fc1c5 100644 --- a/.github/workflows/license-finder.yml +++ b/.github/workflows/license-finder.yml @@ -20,7 +20,7 @@ jobs: license_finder > ./license-finder-report - name: Upload artifact - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: scan-license-finder-report path: ./license-finder-report diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index a64b1624..e649675e 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - - uses: cpp-linter/cpp-linter-action@948cea872508ea44123a1e3d8638a5b828a409af + - uses: cpp-linter/cpp-linter-action@a37e579de27f4a759c4c5f18f1d43592076236c9 id: linter continue-on-error: true env: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 654e8efb..aa93ad21 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde with: egress-policy: audit @@ -55,14 +55,14 @@ jobs: # echo "version=mtower-${VERSION:1}.bin" >> "$GITHUB_OUTPUT" - name: Upload build artifacts - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: ${{ steps.mtower_version.outputs.version }}_s.bin path: ./${{ steps.mtower_version.outputs.version }}_s.bin if-no-files-found: error - name: Upload build artifacts - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: ${{ steps.mtower_version.outputs.version }}_ns.bin path: ./${{ steps.mtower_version.outputs.version }}_ns.bin @@ -78,7 +78,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde with: egress-policy: audit @@ -111,7 +111,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/') steps: - name: Harden Runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde with: egress-policy: audit diff --git a/.github/workflows/scancode.yml b/.github/workflows/scancode.yml index 56d345d8..9adc0d2d 100644 --- a/.github/workflows/scancode.yml +++ b/.github/workflows/scancode.yml @@ -21,7 +21,7 @@ jobs: run: scancode -clpeui -n 2 --cyclonedx ./results/sbom-cyclonedx --spdx-rdf ./results/sbom-spdx ./ - name: Upload artifact - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: scan-scancode-report path: ./results/ diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index ddac55e7..42509fd1 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde with: egress-policy: audit @@ -64,7 +64,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a with: name: SARIF file path: results.sarif @@ -72,6 +72,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa with: sarif_file: results.sarif \ No newline at end of file