Fixed version pinning and dependabot group updates

This commit is contained in:
Alexey Pustovalov 2026-06-10 16:27:15 +09:00
parent 604166c4a8
commit 4003f63dba
5 changed files with 12 additions and 7 deletions

View file

@ -11,7 +11,7 @@ runs:
using: composite using: composite
steps: steps:
- name: Install cosign - name: Install cosign
uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
with: with:
cosign-release: ${{ inputs.cosign_release }} cosign-release: ${{ inputs.cosign_release }}

View file

@ -51,7 +51,7 @@ runs:
steps: steps:
- name: Build and optionally push image - name: Build and optionally push image
id: build id: build
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
with: with:
context: ${{ inputs.context }} context: ${{ inputs.context }}
file: ${{ inputs.file }} file: ${{ inputs.file }}

View file

@ -10,6 +10,11 @@ updates:
labels: labels:
- "dependencies" - "dependencies"
- "github_actions" - "github_actions"
groups:
github-actions:
applies-to: version-updates
patterns:
- "*"
- package-ecosystem: "docker" - package-ecosystem: "docker"
directories: directories:

View file

@ -190,7 +190,7 @@ jobs:
- name: Build image - name: Build image
id: build_image id: build_image
uses: redhat-actions/buildah-build@v2.13 uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13
with: with:
context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }}
layers: false layers: false
@ -369,7 +369,7 @@ jobs:
- name: Build image - name: Build image
id: build_image id: build_image
uses: redhat-actions/buildah-build@v2.13 uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13
with: with:
context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }}
layers: false layers: false
@ -579,7 +579,7 @@ jobs:
- name: Build image - name: Build image
id: build_image id: build_image
if: ${{ matrix.build != 'snmptraps' }} if: ${{ matrix.build != 'snmptraps' }}
uses: redhat-actions/buildah-build@v2.13 uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13
with: with:
context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }}
layers: false layers: false
@ -598,7 +598,7 @@ jobs:
- name: Build snmptraps image - name: Build snmptraps image
id: build_image_snmptraps id: build_image_snmptraps
if: ${{ matrix.build == 'snmptraps' }} if: ${{ matrix.build == 'snmptraps' }}
uses: redhat-actions/buildah-build@v2.13 uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13
with: with:
context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }} context: ${{ format('{0}/{1}/rhel', env.DOCKERFILES_DIRECTORY, matrix.build) }}
layers: false layers: false

View file

@ -55,7 +55,7 @@ jobs:
fetch-depth: 0 fetch-depth: 0
- name: Analyze with SonarCloud - name: Analyze with SonarCloud
uses: SonarSource/sonarqube-scan-action@v8.1.0 uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0
env: env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on Sonarcloud.io, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret) SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # Generate a token on Sonarcloud.io, add it to the secrets of this repo with the name SONAR_TOKEN (Settings > Secrets > Actions > add new repository secret)