From 4003f63dba75de3c9e237408f34c0ccbf424ebc5 Mon Sep 17 00:00:00 2001 From: Alexey Pustovalov Date: Wed, 10 Jun 2026 16:27:15 +0900 Subject: [PATCH] Fixed version pinning and dependabot group updates --- .github/actions/cosign-install/action.yml | 2 +- .github/actions/docker-build-push-linux/action.yml | 2 +- .github/dependabot.yml | 5 +++++ .github/workflows/images_build_rhel.yml | 8 ++++---- .github/workflows/sonarcloud.yml | 2 +- 5 files changed, 12 insertions(+), 7 deletions(-) diff --git a/.github/actions/cosign-install/action.yml b/.github/actions/cosign-install/action.yml index ffed1970..a54ad0e4 100644 --- a/.github/actions/cosign-install/action.yml +++ b/.github/actions/cosign-install/action.yml @@ -11,7 +11,7 @@ runs: using: composite steps: - name: Install cosign - uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 + uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0 with: cosign-release: ${{ inputs.cosign_release }} diff --git a/.github/actions/docker-build-push-linux/action.yml b/.github/actions/docker-build-push-linux/action.yml index 6cc361c3..728a1834 100644 --- a/.github/actions/docker-build-push-linux/action.yml +++ b/.github/actions/docker-build-push-linux/action.yml @@ -51,7 +51,7 @@ runs: steps: - name: Build and optionally push image id: build - uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 + uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0 with: context: ${{ inputs.context }} file: ${{ inputs.file }} diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 50e846e5..c6a58a25 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,6 +10,11 @@ updates: labels: - "dependencies" - "github_actions" + groups: + github-actions: + applies-to: version-updates + patterns: + - "*" - package-ecosystem: "docker" directories: diff --git a/.github/workflows/images_build_rhel.yml b/.github/workflows/images_build_rhel.yml index 0bc92c77..0a1b0b25 100644 --- a/.github/workflows/images_build_rhel.yml +++ b/.github/workflows/images_build_rhel.yml @@ -190,7 +190,7 @@ jobs: - name: Build image id: build_image - uses: redhat-actions/buildah-build@v2.13 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13 with: context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} layers: false @@ -369,7 +369,7 @@ jobs: - name: Build image id: build_image - uses: redhat-actions/buildah-build@v2.13 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13 with: context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} layers: false @@ -579,7 +579,7 @@ jobs: - name: Build image id: build_image if: ${{ matrix.build != 'snmptraps' }} - uses: redhat-actions/buildah-build@v2.13 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13 with: context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} layers: false @@ -598,7 +598,7 @@ jobs: - name: Build snmptraps image id: build_image_snmptraps if: ${{ matrix.build == 'snmptraps' }} - uses: redhat-actions/buildah-build@v2.13 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13 with: context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} layers: false diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml index c8980606..147766eb 100644 --- a/.github/workflows/sonarcloud.yml +++ b/.github/workflows/sonarcloud.yml @@ -55,7 +55,7 @@ jobs: fetch-depth: 0 - name: Analyze with SonarCloud - uses: SonarSource/sonarqube-scan-action@v8.1.0 + uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on Sonarcloud.io, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret)