2222
2323 steps :
2424 - name : Check out repo
25- uses : actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
25+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
2626 with :
2727 persist-credentials : false
2828
3838 mv KeyConnector.zip ../../../
3939
4040 - name : Upload project artifact
41- uses : actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
41+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
4242 with :
4343 name : KeyConnector.zip
4444 path : src/KeyConnector/KeyConnector.zip
@@ -55,12 +55,12 @@ jobs:
5555 security-events : write
5656 steps :
5757 - name : Check out repo
58- uses : actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
58+ uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
5959 with :
6060 persist-credentials : false
6161
6262 - name : Login to GitHub Container Registry
63- uses : docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5 .0
63+ uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6 .0
6464 with :
6565 registry : ghcr.io
6666 username : ${{ github.actor }}
@@ -105,7 +105,7 @@ jobs:
105105
106106 - name : Build Docker image
107107 id : build-docker
108- uses : docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9 .0
108+ uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18 .0
109109 with :
110110 context : src/KeyConnector
111111 file : src/KeyConnector/Dockerfile
@@ -133,14 +133,14 @@ jobs:
133133
134134 - name : Scan Docker image
135135 id : container-scan
136- uses : anchore/scan-action@2c901ab7378897c01b8efaa2d0c9bf519cc64b9e # v6.2.0
136+ uses : anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e # v6.5.1
137137 with :
138138 image : ${{ steps.image-name.outputs.name }}
139139 fail-build : false
140140 output-format : sarif
141141
142142 - name : Upload Grype results to GitHub
143- uses : github/codeql-action/upload-sarif@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
143+ uses : github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
144144 with :
145145 sarif_file : ${{ steps.container-scan.outputs.sarif }}
146146 sha : ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.head.sha || github.sha }}
0 commit comments