diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c03a68b..c37040a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: # Linting - name: Linting - uses: golangci/golangci-lint-action@a3d68bc6f4a8c132f068325dadcd0ce863e47add + uses: golangci/golangci-lint-action@0ad4b724048089dc46bb90eddab6dbbcb4fe49a2 with: version: latest args: --config=./.github/.golangci.yml ./... @@ -106,7 +106,7 @@ jobs: # Codecov - name: Codecov - uses: codecov/codecov-action@bb813333f9a39351d332110e9aaca7bcdc503b0f + uses: codecov/codecov-action@2439dfc05cd9e2e64113700688413fcdb07527d8 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} with: @@ -114,7 +114,7 @@ jobs: # Sonar - name: SonarCloud Scan - uses: SonarSource/sonarcloud-github-action@f5003fc9688ade81ce47b57a3fa97a8d3f12de4c + uses: SonarSource/sonarcloud-github-action@eb211723266fe8e83102bac7361f0a05c3ac1d1b env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ddd1948..6e196b3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,12 +35,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@5c681efc3f71cd6b47b1c14583c9e86913966e9f + uses: github/codeql-action/init@fd5fa130e2c632f29b237077157766ea2ef07a13 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@5c681efc3f71cd6b47b1c14583c9e86913966e9f + uses: github/codeql-action/autobuild@fd5fa130e2c632f29b237077157766ea2ef07a13 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5c681efc3f71cd6b47b1c14583c9e86913966e9f + uses: github/codeql-action/analyze@fd5fa130e2c632f29b237077157766ea2ef07a13 diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 3eb62a2..f1605d7 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -43,7 +43,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@fdeb02dc9c3fb721c82a431b2708514aca13dbeb + uses: ossf/scorecard-action@6c4912ed9e5f80cfda40164b92753f21f0892cab with: results_file: results.sarif results_format: sarif @@ -69,6 +69,6 @@ jobs: # required for Code scanning alerts - name: "Upload SARIF results to code scanning" - uses: github/codeql-action/upload-sarif@5c681efc3f71cd6b47b1c14583c9e86913966e9f + uses: github/codeql-action/upload-sarif@fd5fa130e2c632f29b237077157766ea2ef07a13 with: sarif_file: results.sarif