24
24
25
25
- name : Gather metadata
26
26
id : meta
27
- uses : docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5.6.1
27
+ uses : docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
28
28
with :
29
29
images : ghcr.io/${{ github.repository_owner }}/config-reloader
30
30
flavor : |
@@ -36,12 +36,12 @@ jobs:
36
36
type=raw,value=latest,enable=${{ github.ref == format('refs/heads/{0}', github.event.repository.default_branch) }}
37
37
38
38
- name : Set up QEMU
39
- uses : docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3 .0
39
+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6 .0
40
40
with :
41
41
platforms : all
42
42
43
43
- name : Set up Docker Buildx
44
- uses : docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8 .0
44
+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10 .0
45
45
46
46
- name : Login to GitHub Container Registry
47
47
uses : docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
52
52
if : github.event_name == 'push'
53
53
54
54
- name : Build and push
55
- uses : docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13 .0
55
+ uses : docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15 .0
56
56
with :
57
57
context : .
58
58
platforms : linux/amd64,linux/arm64,linux/arm/v7
74
74
if : github.event_name == 'push'
75
75
76
76
- name : Upload Trivy scan results to GitHub Security tab
77
- uses : github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
77
+ uses : github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
78
78
with :
79
79
sarif_file : " trivy-results.sarif"
80
80
if : github.event_name == 'push'
0 commit comments