From 633f606edd9a59379208a2c46937b12a52ef7889 Mon Sep 17 00:00:00 2001 From: "miracum-renovate[bot]" <184965040+miracum-renovate[bot]@users.noreply.github.com> Date: Wed, 22 Jan 2025 11:18:47 +0000 Subject: [PATCH 1/2] chore(deps): update github actions --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/megalinter.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/renovate.yaml | 2 +- .github/workflows/scorecards.yaml | 4 ++-- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 94030dd1..291ff8c7 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -64,7 +64,7 @@ jobs: k8s-version: [1.28.13, 1.29.8, 1.30.4, 1.31.0] steps: - name: Harden Runner - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 + uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4 with: egress-policy: audit # change to 'egress-policy: block' after couple of runs disable-sudo: true @@ -76,7 +76,7 @@ jobs: fetch-depth: 0 - name: Set up chart-testing - uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1 + uses: helm/chart-testing-action@0d28d3144d3a25ea2cc349d6e59901c4ff469b3b # v2.7.0 - name: Run chart-testing (list-changed) id: list-changed diff --git a/.github/workflows/megalinter.yaml b/.github/workflows/megalinter.yaml index 8c48173c..be96d278 100644 --- a/.github/workflows/megalinter.yaml +++ b/.github/workflows/megalinter.yaml @@ -51,7 +51,7 @@ jobs: # Upload MegaLinter artifacts - name: Archive production artifacts if: ${{ always() }} - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: MegaLinter reports path: | diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 14bcf733..cdb4c35c 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -46,7 +46,7 @@ jobs: run: generate-chart-changelog.sh - name: Run chart-releaser - uses: helm/chart-releaser-action@a917fd15b20e8b64b94d9158ad54cd6345335584 # v1.6.0 + uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0 with: config: .github/ct/ct.yaml env: @@ -80,7 +80,7 @@ jobs: kubescape scan framework mitre --format=html --output=kubescape-reports/mitre.html charts/ - name: "Upload kubescape reports" - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: kubescape-reports path: kubescape-reports/ diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml index 2860960b..6297543b 100644 --- a/.github/workflows/renovate.yaml +++ b/.github/workflows/renovate.yaml @@ -31,7 +31,7 @@ jobs: fetch-depth: 0 - name: Self-hosted Renovate - uses: renovatebot/github-action@2be773c4be8361d8182cc1b750e75bbc75af71b0 # v41.0.7 + uses: renovatebot/github-action@3f10d7a25cf0aa7b37519aa771ed9143fcbb5da5 # v41.0.10 with: token: "${{ steps.app-token.outputs.token }}" mount-docker-socket: true diff --git a/.github/workflows/scorecards.yaml b/.github/workflows/scorecards.yaml index 35c81f7a..a07e10a7 100644 --- a/.github/workflows/scorecards.yaml +++ b/.github/workflows/scorecards.yaml @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: SARIF file path: results.sarif @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 + uses: github/codeql-action/upload-sarif@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2 with: sarif_file: results.sarif From 386b2f96ae7ca6be066e35601744c7e446089caf Mon Sep 17 00:00:00 2001 From: chgl Date: Wed, 22 Jan 2025 13:02:39 +0100 Subject: [PATCH 2/2] fix config --- .github/workflows/ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 291ff8c7..73c6b288 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -81,7 +81,7 @@ jobs: - name: Run chart-testing (list-changed) id: list-changed run: | - changed=$(ct list-changed) + changed=$(ct list-changed --config .github/ct/ct.yaml ) if [[ -n "$changed" ]]; then echo "changed=true" >> "${GITHUB_OUTPUT}" fi