From 61a51b317fc72a19cc5624c1aa46871cf875f08b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Aug 2024 09:23:25 +0000 Subject: [PATCH] Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [github/codeql-action](https://github.com/github/codeql-action), [anchore/scan-action](https://github.com/anchore/scan-action), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) and [actions/setup-go](https://github.com/actions/setup-go). Updates `github/codeql-action` from 3.25.11 to 3.25.15 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b611370bb5703a7efb587f9d136a52ea24c5c38c...afb54ba388a7dca6ecae48f608c4ff05ff4cc77a) Updates `anchore/scan-action` from 3.6.4 to 4.1.0 - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/anchore/scan-action/compare/3343887d815d7b07465f6fdcd395bd66508d486a...d43cc1dfea6a99ed123bf8f3133f1797c9b44492) Updates `docker/setup-qemu-action` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/5927c834f5b4fdf503fca6f4c7eccda82949e1ee...49b3bc8e6bdd4a60e6116a5414239cba5943d3cf) Updates `actions/setup-go` from 5.0.1 to 5.0.2 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/cdcb36043654635271a94b9a6d1392de5bb323a7...0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/linting.yml | 8 ++++---- .github/workflows/multiarch.yml | 2 +- .github/workflows/report.yml | 8 ++++---- .github/workflows/subctl-unit.yml | 2 +- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml index f60974fda..8fdfff73e 100644 --- a/.github/workflows/linting.yml +++ b/.github/workflows/linting.yml @@ -131,11 +131,11 @@ jobs: - name: Check out the repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Initialize CodeQL - uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a with: languages: go - name: Run CodeQL variant analysis - uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a - name: Show CodeQL scan SARIF report if: always() run: cat ../results/go.sarif @@ -147,7 +147,7 @@ jobs: - name: Check out the repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Run Anchore vulnerability scanner - uses: anchore/scan-action@3343887d815d7b07465f6fdcd395bd66508d486a + uses: anchore/scan-action@d43cc1dfea6a99ed123bf8f3133f1797c9b44492 id: scan with: path: "." @@ -158,7 +158,7 @@ jobs: run: cat ${{ steps.scan.outputs.sarif }} - name: Upload Anchore scan SARIF report if: always() - uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/multiarch.yml b/.github/workflows/multiarch.yml index 8b6f0af2c..54120842b 100644 --- a/.github/workflows/multiarch.yml +++ b/.github/workflows/multiarch.yml @@ -14,7 +14,7 @@ jobs: - name: Check out the repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Set up QEMU (to support building on non-native architectures) - uses: docker/setup-qemu-action@5927c834f5b4fdf503fca6f4c7eccda82949e1ee + uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf - name: Build the multi-arch images run: make multiarch-images - name: Check that we actually build multi-arch images diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml index ec15b2760..b89399c5c 100644 --- a/.github/workflows/report.yml +++ b/.github/workflows/report.yml @@ -38,11 +38,11 @@ jobs: - name: Check out the repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Initialize CodeQL - uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a with: languages: go - name: Run CodeQL variant analysis - uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a - name: Show CodeQL scan SARIF report if: always() run: cat ../results/go.sarif @@ -57,7 +57,7 @@ jobs: - name: Check out the repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Run Anchore vulnerability scanner - uses: anchore/scan-action@3343887d815d7b07465f6fdcd395bd66508d486a + uses: anchore/scan-action@d43cc1dfea6a99ed123bf8f3133f1797c9b44492 id: scan with: path: "." @@ -65,6 +65,6 @@ jobs: - name: Show Anchore scan SARIF report run: cat ${{ steps.scan.outputs.sarif }} - name: Upload Anchore scan SARIF report - uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c + uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/subctl-unit.yml b/.github/workflows/subctl-unit.yml index 645c30f88..9944c4bd9 100644 --- a/.github/workflows/subctl-unit.yml +++ b/.github/workflows/subctl-unit.yml @@ -33,7 +33,7 @@ jobs: ref: ${{ github.base_ref }} - name: Set up Go - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 with: go-version: '1.22' check-latest: true