Skip to content

Commit e8e6599

Browse files
fredbifredbi
authored
chore: updated gh-actions (onboards trivy action update) (#131)
Signed-off-by: Frédéric BIDON <[email protected]>
1 parent 113f19e commit e8e6599

File tree

9 files changed

+18
-18
lines changed

9 files changed

+18
-18
lines changed

‎.github/workflows/auto-merge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,7 @@ jobs:
152152
run: gh pr review --approve "$PR_URL"
153153
-
154154
name: Wait for all workflow runs to complete
155-
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
155+
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
156156
with:
157157
pr-url: ${{ env.PR_URL }}
158158
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/bump-release-monorepo.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -136,7 +136,7 @@ jobs:
136136
-
137137
name: Detect go mono-repo
138138
id: detect-monorepo
139-
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
139+
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
140140

141141
bump-release-single:
142142
name: Bump release (single module)
@@ -195,7 +195,7 @@ jobs:
195195
-
196196
name: Determine next tag
197197
id: bump-release
198-
uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
198+
uses: go-openapi/gh-actions/ci-jobs/next-tag@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
199199
with:
200200
bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
201201
bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
@@ -307,7 +307,7 @@ jobs:
307307
-
308308
name: Configure bot credentials
309309
if: ${{ inputs.enable-tag-signing == 'true' }}
310-
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
310+
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
311311
# This is using the GPG signature of bot-go-openapi.
312312
#
313313
# For go-openapi repos (using secrets: inherit):

‎.github/workflows/bump-release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -114,15 +114,15 @@ jobs:
114114
-
115115
name: Determine next tag
116116
id: bump-release
117-
uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
117+
uses: go-openapi/gh-actions/ci-jobs/next-tag@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
118118
with:
119119
bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
120120
bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
121121
bump-major: ${{ steps.bump-check.outputs.bump-major }}
122122
-
123123
name: Configure bot credentials
124124
if: ${{ inputs.enable-tag-signing == 'true' }}
125-
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
125+
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
126126
# This is using the GPG signature of bot-go-openapi.
127127
#
128128
# For go-openapi repos (using secrets: inherit):

‎.github/workflows/collect-reports.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
path: reports/
3333
-
3434
name: Install go-junit-report
35-
uses: go-openapi/gh-actions/install/go-junit-report@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
35+
uses: go-openapi/gh-actions/install/go-junit-report@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
3636
-
3737
name: Convert test reports to a merged JUnit XML
3838
# NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.
@@ -57,7 +57,7 @@ jobs:
5757
verbose: true
5858
-
5959
name: Install go-ctrf-json-reporter
60-
uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
60+
uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
6161
-
6262
name: Convert test reports to CTRF JSON
6363
# description: |

‎.github/workflows/contributors.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ jobs:
118118
} > "${file}"
119119
done
120120
- name: Configure bot credentials
121-
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
121+
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
122122
id: bot-credentials
123123
# For go-openapi repos (using secrets: inherit):
124124
# Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -183,7 +183,7 @@ jobs:
183183
- name: Auto-approve PR
184184
run: gh pr review --approve "$PR_URL"
185185
- name: Wait for all workflow runs to complete
186-
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
186+
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
187187
with:
188188
pr-url: ${{ env.PR_URL }}
189189
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/go-test-monorepo.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
-
4343
name: Detect go mono-repo
4444
id: detect-monorepo
45-
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
45+
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
4646
-
4747
name: golangci-lint [monorepo]
4848
# golangci-action v9.1+ has an experimental built-in mono repo detection setup.
@@ -111,10 +111,10 @@ jobs:
111111
-
112112
name: Detect go version capabilities
113113
id: detect-go-version
114-
uses: go-openapi/gh-actions/ci-jobs/detect-go-version@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
114+
uses: go-openapi/gh-actions/ci-jobs/detect-go-version@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
115115
-
116116
name: Install gotestsum
117-
uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
117+
uses: go-openapi/gh-actions/install/gotestsum@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
118118
-
119119
name: Ensure TMP is created on windows runners
120120
# On windows, some tests require testing.TempDir to reside on the same drive as the code.

‎.github/workflows/go-test.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
cache: true
5959
-
6060
name: Install gotestsum
61-
uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
61+
uses: go-openapi/gh-actions/install/gotestsum@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
6262
-
6363
name: Ensure TMP is created on windows runners
6464
# On windows, some tests require testing.TempDir to reside on the same drive as the code.

‎.github/workflows/prepare-release-monorepo.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ jobs:
108108
cache-dependency-path: "**/go.sum"
109109
- name: Detect go mono-repo
110110
id: detect-monorepo
111-
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
111+
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
112112
- name: Update go.mod files for new release
113113
env:
114114
TARGET_TAG: ${{ inputs.target-tag }}
@@ -185,7 +185,7 @@ jobs:
185185
echo "::notice title=changes::Git status after updates"
186186
git status --short
187187
- name: Configure bot credentials
188-
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
188+
uses: go-openapi/gh-actions/ci-jobs/bot-credentials@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
189189
id: bot-credentials
190190
# For go-openapi repos (using secrets: inherit):
191191
# Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -268,7 +268,7 @@ jobs:
268268
run: gh pr review --approve "$PR_URL"
269269
- name: Wait for all workflow runs to complete
270270
if: ${{ needs.prepare-modules.outputs.pull-request-url != '' }}
271-
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
271+
uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
272272
with:
273273
pr-url: ${{ env.PR_URL }}
274274
github-token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ jobs:
8989
name: Detect go mono-repo
9090
if: ${{ inputs.is-monorepo == 'true' }}
9191
id: detect-monorepo
92-
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
92+
uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@11145fb6068468e0aa20a7b12552be02119605a0 # v1.4.9
9393
-
9494
name: Install git-cliff
9595
uses: taiki-e/install-action@64c5c20c872907b6f7cd50994ac189e7274160f2 # v2.68.26

0 commit comments

Comments
 (0)