From 704bdcbc952c955d9ae8e593e5f60492403aeb34 Mon Sep 17 00:00:00 2001 From: Fran Mulero Date: Thu, 7 Nov 2024 12:54:09 +0100 Subject: [PATCH] Upgrade GH actions and configure dependabot Signed-off-by: Fran Mulero --- .github/dependabot.yml | 0 .github/workflows/main.yml | 13 +++++++------ 2 files changed, 7 insertions(+), 6 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..e69de29 diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index e5aaf09..32f8745 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -14,7 +14,8 @@ on: # Allows you to run this workflow manually from the Actions tab workflow_dispatch: - +# Remove all permissions by default +permissions: {} # A workflow run is made up of one or more jobs that can run sequentially or in parallel jobs: # This workflow contains a single job called "build" @@ -24,8 +25,8 @@ jobs: # Steps represent a sequence of tasks that will be executed as part of the job steps: # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it - - uses: actions/checkout@v2 - - uses: actions/setup-go@v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed with: go-version: '^1.22.4' # The Go version to download (if necessary) and use. - name: Install Build Dependencies @@ -52,7 +53,7 @@ jobs: file $target tar -C "$(dirname "$target")" -czf "$target.tar.gz" "$(basename "$target")" done - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 with: name: built-binaries path: | @@ -62,8 +63,8 @@ jobs: if: startsWith(github.ref, 'refs/tags/') runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 - - uses: actions/download-artifact@v4.1.7 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 + - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: path: ./artifacts - name: Set tag name