From 890de7b76d51d8a3fd573ae51cbe96d1619334d7 Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Tue, 1 Aug 2023 00:04:03 +0000 Subject: [PATCH 1/3] chore(deps): update github-actions Signed-off-by: Mend Renovate --- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/publish_maven.yml | 2 +- .github/workflows/scorecards.yml | 2 +- actions/gradle/publish/action.yml | 2 +- internal/builders/bazel/action.yml | 2 +- internal/builders/gradle/action.yml | 4 ++-- internal/builders/maven/action.yml | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index b0734848d8..658217701e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -59,7 +59,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0 + uses: github/codeql-action/init@0ba4244466797eb048eb91a6cd43d5c03ca8bd05 # v2.21.2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -72,7 +72,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0 + uses: github/codeql-action/autobuild@0ba4244466797eb048eb91a6cd43d5c03ca8bd05 # v2.21.2 # Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -85,7 +85,7 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0 + uses: github/codeql-action/analyze@0ba4244466797eb048eb91a6cd43d5c03ca8bd05 # v2.21.2 # NOTE: Checks that the matrix job above completes successfully. # This is necessary because the matrix strategy generates new jobs with diff --git a/.github/workflows/publish_maven.yml b/.github/workflows/publish_maven.yml index b279481efa..0d91bebe68 100644 --- a/.github/workflows/publish_maven.yml +++ b/.github/workflows/publish_maven.yml @@ -51,7 +51,7 @@ jobs: - name: Checkout the project repository uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@main - name: Set up Java for publishing to Maven Central Repository - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3 env: MAVEN_USERNAME: ${{ secrets.maven-username }} MAVEN_PASSWORD: ${{ secrets.maven-password }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 87c84baa59..a028ec5963 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -71,6 +71,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1813ca74c3faaa3a2da2070b9b8a0b3e7373a0d8 # v2.21.0 + uses: github/codeql-action/upload-sarif@0ba4244466797eb048eb91a6cd43d5c03ca8bd05 # v2.21.2 with: sarif_file: results.sarif diff --git a/actions/gradle/publish/action.yml b/actions/gradle/publish/action.yml index 0d69eb9cc4..dc217d3d1a 100644 --- a/actions/gradle/publish/action.yml +++ b/actions/gradle/publish/action.yml @@ -48,7 +48,7 @@ runs: steps: - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Set up JDK - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 env: MAVEN_USERNAME: ${{ inputs.maven-username }} MAVEN_PASSWORD: ${{ inputs.maven-password }} diff --git a/internal/builders/bazel/action.yml b/internal/builders/bazel/action.yml index a5f722e96e..b8710239ed 100644 --- a/internal/builders/bazel/action.yml +++ b/internal/builders/bazel/action.yml @@ -53,7 +53,7 @@ runs: - name: Setup Java id: java - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 with: distribution: "${{ fromJson(inputs.slsa-workflow-inputs).user-java-distribution }}" java-version: "${{ fromJson(inputs.slsa-workflow-inputs).user-java-version }}" diff --git a/internal/builders/gradle/action.yml b/internal/builders/gradle/action.yml index 7bc07074d1..72d262468b 100644 --- a/internal/builders/gradle/action.yml +++ b/internal/builders/gradle/action.yml @@ -54,12 +54,12 @@ runs: steps: - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Set up JDK - uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 with: distribution: temurin java-version: ${{ fromJson(inputs.slsa-workflow-inputs).jdk-version }} - name: Setup Gradle - uses: gradle/gradle-build-action@915a66c096a03101667f9df2e56c9efef558b165 # v2.6.1 + uses: gradle/gradle-build-action@a4cf152f482c7ca97ef56ead29bf08bcd953284c # v2.7.0 with: arguments: build -x test - name: Put release artifacts in one directory diff --git a/internal/builders/maven/action.yml b/internal/builders/maven/action.yml index 9072915ab2..2e22c412d7 100644 --- a/internal/builders/maven/action.yml +++ b/internal/builders/maven/action.yml @@ -54,7 +54,7 @@ runs: steps: - uses: actions/checkout@96f53100ba2a5449eb71d2e6604bbcd94b9449b5 # v 3.5.2 - name: Set up JDK - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v 3.11.0 + uses: actions/setup-java@b943a4ed876ec91f6d0cde2181d88d24e8e348de # v 3.11.0 with: distribution: temurin java-version: ${{ fromJson(inputs.slsa-workflow-inputs).jdk-version }} From 886eef82153a0fe7d4c314e2a2865a334d2449f7 Mon Sep 17 00:00:00 2001 From: Ian Lewis Date: Tue, 1 Aug 2023 09:07:08 +0900 Subject: [PATCH 2/3] Update .github/workflows/publish_maven.yml Signed-off-by: Ian Lewis --- .github/workflows/publish_maven.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/publish_maven.yml b/.github/workflows/publish_maven.yml index 0d91bebe68..cac8f2f10c 100644 --- a/.github/workflows/publish_maven.yml +++ b/.github/workflows/publish_maven.yml @@ -51,7 +51,7 @@ jobs: - name: Checkout the project repository uses: slsa-framework/slsa-github-generator/.github/actions/secure-project-checkout@main - name: Set up Java for publishing to Maven Central Repository - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 env: MAVEN_USERNAME: ${{ secrets.maven-username }} MAVEN_PASSWORD: ${{ secrets.maven-password }} From 80606a291de74026a861fcd39c8063cc2cf60490 Mon Sep 17 00:00:00 2001 From: Ian Lewis Date: Tue, 1 Aug 2023 09:07:16 +0900 Subject: [PATCH 3/3] Update internal/builders/maven/action.yml Signed-off-by: Ian Lewis --- internal/builders/maven/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/builders/maven/action.yml b/internal/builders/maven/action.yml index 2e22c412d7..0341de7353 100644 --- a/internal/builders/maven/action.yml +++ b/internal/builders/maven/action.yml @@ -54,7 +54,7 @@ runs: steps: - uses: actions/checkout@96f53100ba2a5449eb71d2e6604bbcd94b9449b5 # v 3.5.2 - name: Set up JDK - uses: actions/setup-java@b943a4ed876ec91f6d0cde2181d88d24e8e348de # v 3.11.0 + uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 with: distribution: temurin java-version: ${{ fromJson(inputs.slsa-workflow-inputs).jdk-version }}