Skip to content

Update CI dependencies #7142

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
neilalexander merged 1 commit into from
Aug 4, 2025
Merged

Update CI dependencies #7142

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/cov.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,8 @@ jobs:

- name: Convert coverage.out to coverage.lcov
# Use commit hash here to avoid a re-tagging attack, as this is a third-party action
# Commit 4e1989767862652e6ca8d3e2e61aabe6d43be28b = tag v1.1.1
uses: jandelgado/gcov2lcov-action@4e1989767862652e6ca8d3e2e61aabe6d43be28b
# Commit e4612787670fc5b5f49026b8c29c5569921de1db = tag v1.2.0
uses: jandelgado/gcov2lcov-action@e4612787670fc5b5f49026b8c29c5569921de1db
with:
infile: acc.out
working-directory: src/github.com/nats-io/nats-server
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,13 +33,13 @@ jobs:

- name: Install cosign
# Use commit hash here to avoid a re-tagging attack, as this is a third-party action
# Commit 398d4b0eeef1380460a10c8013a76f728fb906ac = tag v3.9.1
uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac
# Commit d58896d6a1865668819e1d91763c7751a165e159 = tag v3.9.2
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159

- name: Install syft
# Use commit hash here to avoid a re-tagging attack, as this is a third-party action
# Commit 9246b90769f852b3a8921f330c59e0b3f439d6e9 = tag v0.20.1
uses: anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9
# Commit 7b36ad622f042cab6f59a75c2ac24ccb256e9b45 = tag v0.20.4
uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45
with:
syft-version: "v1.27.1"

Expand Down