Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
87 changes: 26 additions & 61 deletions .github/workflows/actions.lock
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
# This file is machine-generated by `gh actions-lock`.
# Do not edit by hand; run `gh actions-lock` to update.
# Docs: https://gh.io/actions-lockfile
version: 'v0.0.2'
version: 'v0.0.3'
workflows:
'.github/workflows/codeql.yml':
- 'actions/checkout@v7.0.1'
- 'github/codeql-action@v4.38.0'
- 'github/codeql-action@v4.38.3'
'.github/workflows/distro-matrix.yml':
- 'actions/checkout@v7.0.1'
'.github/workflows/guix-nix-policy.yml':
Expand All @@ -21,11 +21,11 @@ workflows:
- 'actions/deploy-pages@v5.0.1'
- 'actions/upload-pages-artifact@v5.0.0'
'.github/workflows/push-email-notify.yml':
- 'hyperpolymath/smtp-notify-action@v0.3.0'
- 'hyperpolymath/smtp-notify-action@v0.5.0'
'.github/workflows/quality.yml':
- 'actions/checkout@v7.0.1'
- 'editorconfig-checker/action-editorconfig-checker@v3.0.0'
- 'trufflesecurity/trufflehog@v3.97.4'
- 'trufflesecurity/trufflehog@v3.99.2'
'.github/workflows/release.yml':
- 'actions/checkout@v7.0.1'
- 'softprops/action-gh-release@v3.0.3'
Expand All @@ -35,10 +35,10 @@ workflows:
- 'actions/checkout@v7.0.1'
'.github/workflows/scorecard-enforcer.yml':
- 'actions/checkout@v7.0.1'
- 'actions/download-artifact@v8.0.1'
- 'actions/upload-artifact@v7.0.1'
- 'github/codeql-action@v4.38.0'
- 'ossf/scorecard-action@v2.4.4'
- 'actions/download-artifact@v8.0.2'
- 'actions/upload-artifact@v7.0.2'
- 'github/codeql-action@v4.38.3'
- 'ossf/scorecard-action@v2.5.0'
'.github/workflows/scorecard.yml': []
'.github/workflows/secret-scanner.yml': []
'.github/workflows/security-policy.yml':
Expand All @@ -61,19 +61,19 @@ dependencies:
commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346'
owner_id: 44036562
repo_id: 438112499
'actions/download-artifact@v8.0.1':
ref: 'v8.0.1'
commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
'actions/download-artifact@v8.0.2':
ref: 'v8.0.2'
commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
owner_id: 44036562
repo_id: 192626254
'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
ref: 'v7.0.0'
commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
owner_id: 44036562
repo_id: 192625955
'actions/upload-artifact@v7.0.1':
ref: 'v7.0.1'
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
'actions/upload-artifact@v7.0.2':
ref: 'v7.0.2'
commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
owner_id: 44036562
repo_id: 192625955
'actions/upload-pages-artifact@v5.0.0':
Expand All @@ -88,24 +88,24 @@ dependencies:
commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393'
owner_id: 26415196
repo_id: 297874902
'github/codeql-action@v4.38.0':
ref: 'v4.38.0'
commit: 'sha1-b96794f015dfd88f77b49b1c93e0fa7110f94c63'
'github/codeql-action@v4.38.3':
ref: 'v4.38.3'
commit: 'sha1-24c54180a607b1449ed407dd24f251e4e9147c8d'
owner_id: 9919
repo_id: 259445878
'hyperpolymath/smtp-notify-action@v0.3.0':
ref: 'v0.3.0'
commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
'hyperpolymath/smtp-notify-action@v0.5.0':
ref: 'v0.5.0'
commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef'
owner_id: 6759885
repo_id: 1352485172
'ludeeus/action-shellcheck@2.0.0':
ref: '2.0.0'
commit: 'sha1-00cae500b08a931fb5698e11e79bfbd38e612a38'
owner_id: 15093472
repo_id: 174679242
'ossf/scorecard-action@v2.4.4':
ref: 'v2.4.4'
commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
'ossf/scorecard-action@v2.5.0':
ref: 'v2.5.0'
commit: 'sha1-fa7117db83c52d787ae5a89f350999701505d78e'
owner_id: 67707773
repo_id: 421101922
'peter-evans/repository-dispatch@v4.0.1':
Expand All @@ -118,43 +118,8 @@ dependencies:
commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64'
owner_id: 2242
repo_id: 204253808
'trufflesecurity/trufflehog@v3.97.4':
ref: 'v3.97.4'
commit: 'sha1-363923b901c911a9164f50b6c423f47c15372b1c'
'trufflesecurity/trufflehog@v3.99.2':
ref: 'v3.99.2'
commit: 'sha1-e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9'
owner_id: 79229934
repo_id: 77726177
'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9':
ref: 'v6.1.0'
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
owner_id: 44036562
repo_id: 215566462
'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
ref: 'v7.0.1'
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
owner_id: 44036562
repo_id: 197814629
'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a':
ref: 'v7.0.1'
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
owner_id: 44036562
repo_id: 192625955
'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772':
ref: 'stable'
commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772'
owner_id: 1940490
repo_id: 260749683
'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124':
ref: 'v1.24.1'
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
owner_id: 47606891
repo_id: 331103973
'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc':
ref: 'v2.4.4'
commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc'
owner_id: 67707773
repo_id: 421101922
'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555':
ref: 'v0.10.0'
commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555'
owner_id: 135788
repo_id: 208510314
4 changes: 2 additions & 2 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,12 +42,12 @@ jobs:
uses: actions/checkout@v7.0.1

- name: Initialize CodeQL
uses: github/codeql-action/init@v4.38.2
uses: github/codeql-action/init@v4.38.3
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}

- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4.38.2
uses: github/codeql-action/analyze@v4.38.3
with:
category: "/language:${{ matrix.language }}"
2 changes: 1 addition & 1 deletion .github/workflows/push-email-notify.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
timeout-minutes: 5
steps:
- name: Send push notification email
uses: hyperpolymath/smtp-notify-action@v0.3.0
uses: hyperpolymath/smtp-notify-action@v0.5.0
with:
server_address: ${{ secrets.SMTP_HOST }}
server_port: ${{ secrets.SMTP_PORT }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/quality.yml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
find . -type f -perm /111 -name "*.sh" | head -10 || true

- name: Check for secrets
uses: trufflesecurity/trufflehog@v3.97.9
uses: trufflesecurity/trufflehog@v3.99.2
with:
path: ./
base: ${{ github.event.pull_request.base.sha || github.event.before }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/scorecard-enforcer.yml
Original file line number Diff line number Diff line change
Expand Up @@ -45,19 +45,19 @@ jobs:
persist-credentials: false

- name: Run Scorecard
uses: ossf/scorecard-action@v2.4.4
uses: ossf/scorecard-action@v2.5.0
with:
results_file: results.sarif
results_format: sarif
publish_results: true

- name: Upload SARIF
uses: github/codeql-action/upload-sarif@v4.38.2
uses: github/codeql-action/upload-sarif@v4.38.3
with:
sarif_file: results.sarif

- name: Persist SARIF for downstream score-gate job
uses: actions/upload-artifact@v7.0.1
uses: actions/upload-artifact@v7.0.2
with:
name: scorecard-results
path: results.sarif
Expand All @@ -70,7 +70,7 @@ jobs:
contents: read
steps:
- name: Download SARIF from scorecard job
uses: actions/download-artifact@v8.0.1
uses: actions/download-artifact@v8.0.2
with:
name: scorecard-results

Expand Down
Loading