diff --git a/.github/workflows/build-push-chart.yml b/.github/workflows/build-push-chart.yml index 5afb371..5e0774b 100644 --- a/.github/workflows/build-push-chart.yml +++ b/.github/workflows/build-push-chart.yml @@ -15,7 +15,7 @@ name: Build/Push Image and Release Charts permissions: read-all jobs: setenv: - uses: ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@baf04ec0a50e30e3dc01308b6c7d60eb805b42db + uses: ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@6554590eba9a43567f39201391e1c0d0a134a9d4 with: gh_head_ref: ${{ github.head_ref }} gh_ref_name: ${{ github.ref_name }} @@ -24,7 +24,7 @@ jobs: gh_repo: ${{ github.repository }} gh_run_number: ${{ github.run_number }} release: - uses: ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@baf04ec0a50e30e3dc01308b6c7d60eb805b42db + uses: ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@6554590eba9a43567f39201391e1c0d0a134a9d4 needs: setenv with: gh_repository_owner: ${{ github.repository_owner }} @@ -42,7 +42,7 @@ jobs: permissions: security-events: write statuses: write - uses: ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@baf04ec0a50e30e3dc01308b6c7d60eb805b42db + uses: ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@6554590eba9a43567f39201391e1c0d0a134a9d4 needs: - setenv - release @@ -54,7 +54,7 @@ jobs: helm: permissions: contents: write - uses: ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@baf04ec0a50e30e3dc01308b6c7d60eb805b42db + uses: ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@6554590eba9a43567f39201391e1c0d0a134a9d4 needs: - setenv - release @@ -74,7 +74,7 @@ jobs: GPG_KEY: ${{ secrets.GPG_KEY }} gh_token: ${{ secrets.HELM_INDEXER_TOKEN }} sbom: - uses: ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@baf04ec0a50e30e3dc01308b6c7d60eb805b42db + uses: ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@6554590eba9a43567f39201391e1c0d0a134a9d4 needs: - setenv - release diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 816fb9e..1fe28c0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,11 +29,11 @@ jobs: uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Initialize CodeQL - uses: github/codeql-action/init@8f596b4ae3cb3c588a5c46780b86dd53fef16c52 # v3.25.2 + uses: github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3 with: languages: "python" - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8f596b4ae3cb3c588a5c46780b86dd53fef16c52 # v3.25.2 + uses: github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3 with: category: "/language:python" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index bfa98c7..9ee5e68 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -44,6 +44,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@8f596b4ae3cb3c588a5c46780b86dd53fef16c52 # v3.25.2 + uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3 with: sarif_file: results.sarif