diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 9791154c..5e8ab680 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,17 +15,17 @@ jobs: build-gradle: runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 + - uses: actions/checkout@v4 + - uses: actions/setup-java@v4 with: distribution: temurin java-version: 21 - name: Setup Gradle - uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0 + uses: gradle/gradle-build-action@v3.5.0 - name: Execute Gradle build run: ./gradlew test installDist - name: Archive production artifacts - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4 + uses: actions/upload-artifact@v4 with: name: binaries path: build/install @@ -35,19 +35,19 @@ jobs: needs: build-gradle steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@v4 - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3 + uses: docker/setup-buildx-action@v3 - name: Download binaries - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 + uses: actions/download-artifact@v4 with: name: binaries path: build/install - name: Build container image - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6 + uses: docker/build-push-action@v6 with: push: false builder: ${{ steps.buildx.outputs.name }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b2e0517f..80802a58 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,23 +11,23 @@ jobs: build-gradle: runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 + - uses: actions/checkout@v4 + - uses: actions/setup-java@v4 with: distribution: temurin java-version: 21 - name: Setup Gradle - uses: gradle/gradle-build-action@ac2d340dc04d9e1113182899e983b5400c17cda1 # v3.5.0 + uses: gradle/gradle-build-action@v3.5.0 - name: Execute Gradle build run: ./gradlew -PprojectVersion=${{ github.ref_name }} test assemble installDist - name: Archive binaries - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4 + uses: actions/upload-artifact@v4 with: name: binaries path: build/install retention-days: 1 - name: Archive distribution - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 # v4 + uses: actions/upload-artifact@v4 with: name: distribution path: build/distributions @@ -37,33 +37,33 @@ jobs: needs: build-gradle steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@v4 - name: Login to GitHub Container Registry - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 + uses: docker/login-action@v3 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3 + uses: docker/setup-buildx-action@v3 - name: Set up cosign uses: sigstore/cosign-installer@main - name: Download binaries - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 + uses: actions/download-artifact@v4 with: name: binaries path: build/install - name: Download distribution - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 + uses: actions/download-artifact@v4 with: name: distribution path: build/distributions - name: Build and publish container image - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6 + uses: docker/build-push-action@v6 id: build_push with: push: true @@ -94,7 +94,7 @@ jobs: docker buildx imagetools inspect ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }} docker pull ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }} cosign verify --key cosign.pub ghcr.io/avisi-cloud/${IMAGE_NAME}:${{ github.ref_name }} - - uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5 # v0 + - uses: anchore/sbom-action@v0 with: image: ghcr.io/avisi-cloud/${{ env.IMAGE_NAME }}:${{ github.ref_name }} @@ -103,10 +103,10 @@ jobs: needs: build-gradle steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@v4 - name: Download distribution - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 + uses: actions/download-artifact@v4 with: name: distribution path: build/distributions @@ -128,14 +128,14 @@ jobs: needs: build-gradle steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - - uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4 + uses: actions/checkout@v4 + - uses: actions/setup-java@v4 with: distribution: temurin java-version: 21 - name: Download binaries - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4 + uses: actions/download-artifact@v4 with: name: binaries path: build/install @@ -156,7 +156,7 @@ jobs: --version ${{ github.ref_name }} - name: Upload example site as GitHub Pages artifact - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3 + uses: actions/upload-pages-artifact@v3 with: path: ./build/site @@ -175,4 +175,4 @@ jobs: steps: - name: Deploy example site to GitHub Pages id: deployment - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4 + uses: actions/deploy-pages@v4