|
43 | 43 | source_date_epoch: ${{ steps.config.outputs.source_date_epoch }} |
44 | 44 | push: ${{ steps.config.outputs.push }} |
45 | 45 | steps: |
46 | | - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 46 | + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
47 | 47 | with: |
48 | 48 | persist-credentials: false |
49 | 49 |
|
@@ -115,25 +115,25 @@ jobs: |
115 | 115 | DOCKER_BUILD_SUMMARY: "false" |
116 | 116 | DOCKER_BUILD_RECORD_UPLOAD: "false" |
117 | 117 | steps: |
118 | | - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 |
| 118 | + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 |
119 | 119 | with: |
120 | 120 | persist-credentials: false |
121 | 121 |
|
122 | 122 | # Before any pull so rate limits are authenticated; fork PRs skip (no secrets) |
123 | 123 | - name: 🐳 Login to Docker Hub |
124 | 124 | if: env.DOCKERHUB_USERNAME != '' |
125 | | - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 |
| 125 | + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 |
126 | 126 | with: |
127 | 127 | username: ${{ secrets.DOCKERHUB_USERNAME }} |
128 | 128 | password: ${{ secrets.DOCKERHUB_TOKEN }} |
129 | 129 |
|
130 | 130 | - name: 🐳 Set up QEMU |
131 | | - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 |
| 131 | + uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0 |
132 | 132 | with: |
133 | 133 | image: docker.io/tonistiigi/binfmt:latest@sha256:400a4873b838d1b89194d982c45e5fb3cda4593fbfd7e08a02e76b03b21166f0 |
134 | 134 |
|
135 | 135 | - name: 🐳 Set up Docker Buildx |
136 | | - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 |
| 136 | + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 |
137 | 137 |
|
138 | 138 | # Build both targets before pushing either so the tag pair can't skew |
139 | 139 | - name: 🐳 Build both targets (no push) |
@@ -234,15 +234,15 @@ jobs: |
234 | 234 | # same digests and re-attests them |
235 | 235 | - name: 🔏 Attest runtime image provenance |
236 | 236 | if: needs.setup.outputs.push == 'true' |
237 | | - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 |
| 237 | + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 |
238 | 238 | with: |
239 | 239 | subject-name: index.docker.io/triggerdotdev/${{ matrix.image.repo }} |
240 | 240 | subject-digest: ${{ steps.build_runtime.outputs.digest }} |
241 | 241 | push-to-registry: false |
242 | 242 |
|
243 | 243 | - name: 🔏 Attest build-variant image provenance |
244 | 244 | if: needs.setup.outputs.push == 'true' |
245 | | - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 |
| 245 | + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2 |
246 | 246 | with: |
247 | 247 | subject-name: index.docker.io/triggerdotdev/${{ matrix.image.repo }} |
248 | 248 | subject-digest: ${{ steps.build_toolchain.outputs.digest }} |
|
0 commit comments