diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f991f9e..10e6d58 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: # Linting - name: Linting - uses: golangci/golangci-lint-action@eab1d2f3d76f26c09e2ab8c957fe5bb64bf46b89 + uses: golangci/golangci-lint-action@0e1fd32b0c0584f0d28eec08848dfd2bf6a909d9 with: version: latest args: --config=./.github/.golangci.yml ./... @@ -106,7 +106,7 @@ jobs: # Codecov - name: Codecov - uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a + uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} with: @@ -114,7 +114,7 @@ jobs: # Sonar - name: SonarCloud Scan - uses: SonarSource/sonarcloud-github-action@9f9bba2c7aaf7a55eac26abbac906c3021d211b2 + uses: SonarSource/sonarcloud-github-action@02ef91109b2d589e757aefcfb2854c2783fd7b19 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b194dbe..1aeb81a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -35,12 +35,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@3d3d628990a5f99229dd9fa1821cc5a4f31b613b + uses: github/codeql-action/init@6f9e628e6f9a18c785dd746325ba455111df1b67 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@3d3d628990a5f99229dd9fa1821cc5a4f31b613b + uses: github/codeql-action/autobuild@6f9e628e6f9a18c785dd746325ba455111df1b67 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@3d3d628990a5f99229dd9fa1821cc5a4f31b613b + uses: github/codeql-action/analyze@6f9e628e6f9a18c785dd746325ba455111df1b67 diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 521cbdb..be7a5ef 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -43,7 +43,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@83a1bb1ff6a010f9ab75ad12160fe70252c99b71 + uses: ossf/scorecard-action@7f596de0a35b89e5d6ae8db543f0edf6637b798c with: results_file: results.sarif results_format: sarif @@ -69,6 +69,6 @@ jobs: # required for Code scanning alerts - name: "Upload SARIF results to code scanning" - uses: github/codeql-action/upload-sarif@3d3d628990a5f99229dd9fa1821cc5a4f31b613b + uses: github/codeql-action/upload-sarif@6f9e628e6f9a18c785dd746325ba455111df1b67 with: sarif_file: results.sarif