File tree Expand file tree Collapse file tree 5 files changed +8
-6
lines changed Expand file tree Collapse file tree 5 files changed +8
-6
lines changed Original file line number Diff line number Diff line change 7474 install-only : true
7575
7676 - name : login to ghcr.io
77- uses : docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
77+ uses : docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
7878 with :
7979 registry : ghcr.io
8080 username : ${{ github.actor }}
Original file line number Diff line number Diff line change @@ -22,15 +22,15 @@ jobs:
2222 persist-credentials : false
2323
2424 - name : Install the latest version of uv
25- uses : astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6
25+ uses : astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
2626
2727 - name : Run zizmor 🌈
2828 run : uvx zizmor --format sarif . > results.sarif
2929 env :
3030 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
3131
3232 - name : Upload SARIF file
33- uses : github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3
33+ uses : github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3
3434 with :
3535 sarif_file : results.sarif
3636 category : zizmor
Original file line number Diff line number Diff line change 1- # syntax=docker/dockerfile:1.18 @sha256:dabfc0969b935b2080555ace70ee69a5261af8a8f1b4df97b9e7fbcf6722eddf
1+ # syntax=docker/dockerfile:1.19 @sha256:b6afd42430b15f2d2a4c5a02b919e98a525b785b1aaff16747d2f623364e39b6
22FROM pscale.dev/wolfi-prod/git:2.51.0
33
44COPY ghcommit /ghcommit
Original file line number Diff line number Diff line change 11module github.com/planetscale/ghcommit
22
3- go 1.23 .0
3+ go 1.24 .0
44
55toolchain go1.25.1
66
77require (
88 github.com/jessevdk/go-flags v1.6.1
99 github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7
10- golang.org/x/oauth2 v0.30 .0
10+ golang.org/x/oauth2 v0.31 .0
1111)
1212
1313require (
Original file line number Diff line number Diff line change @@ -12,5 +12,7 @@ golang.org/x/oauth2 v0.29.0 h1:WdYw2tdTK1S8olAzWHdgeqfy+Mtm9XNhv/xJsY65d98=
1212golang.org/x/oauth2 v0.29.0 /go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8 =
1313golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI =
1414golang.org/x/oauth2 v0.30.0 /go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU =
15+ golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo =
16+ golang.org/x/oauth2 v0.31.0 /go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA =
1517golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik =
1618golang.org/x/sys v0.31.0 /go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k =
You can’t perform that action at this time.
0 commit comments