3333 fetch-depth : 0
3434 - uses : ./.github/actions/setup-go
3535 - name : Set up QEMU
36- uses : docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3
36+ uses : docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
3737 - name : Set up Docker Buildx
38- uses : docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3
38+ uses : docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
3939
4040 - name : Generate metadata cso
4141 id : metacso
@@ -47,14 +47,14 @@ jobs:
4747 metadata_tags : ${{ env.metadata_tags }}
4848
4949 - name : Login to ghcr.io for CI
50- uses : docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2 .0
50+ uses : docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3 .0
5151 with :
5252 registry : ghcr.io
5353 username : ${{ github.actor }}
5454 password : ${{ secrets.GITHUB_TOKEN }}
5555
5656 - name : Install Cosign
57- uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5 .0
57+ uses : sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6 .0
5858
5959 - name : Setup Env
6060 run : |
8383
8484 # Import GitHub's cache build to docker cache
8585 - name : Copy cso Golang cache to docker cache
86- uses : docker/build-push-action@31159d49c0d4756269a0940a750801a1ea5d7003 # v6.1.0
86+ uses : docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1
8787 with :
8888 provenance : false
8989 context : /tmp/.cache/cso
9393 target : import-cache
9494
9595 - name : Build and push cso image
96- uses : docker/build-push-action@31159d49c0d4756269a0940a750801a1ea5d7003 # v6
96+ uses : docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6
9797 id : docker_build_release_cso
9898 with :
9999 provenance : false
@@ -129,7 +129,7 @@ jobs:
129129 # Store docker's golang's cache build locally only on the main branch
130130 - name : Store cso Golang cache build locally
131131 if : ${{ steps.cache.outputs.cache-hit != 'true' }}
132- uses : docker/build-push-action@31159d49c0d4756269a0940a750801a1ea5d7003 # v6.1.0
132+ uses : docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1
133133 with :
134134 provenance : false
135135 context : .
0 commit comments