@@ -84,10 +84,10 @@ jobs:
8484        uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  #  v4.2.2
8585
8686      - name : Set up QEMU 
87-         uses : docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a   #  v3.3 .0
87+         uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392   #  v3.6 .0
8888
8989      - name : Set up Docker Buildx 
90-         uses : docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5   #  v3.8 .0
90+         uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2   #  v3.10 .0
9191
9292      - name : Set image name 
9393        id : image-name 
@@ -100,7 +100,7 @@ jobs:
100100
101101name : Gather build metadata 
102102        id : meta 
103-         uses : docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96   #  v5.6.1 
103+         uses : docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804   #  v5.7.0 
104104        with :
105105          images : ${{ steps.image-name.outputs.value }} 
106106          flavor : | 
@@ -118,7 +118,7 @@ jobs:
118118
119119name : Build and push fluentd-${{ matrix.image-type }}-${{ matrix.platform }} image 
120120        id : build 
121-         uses : docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991   #  v6.13 .0
121+         uses : docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4   #  v6.15 .0
122122        with :
123123          context : images/fluentd 
124124          platforms : ${{ matrix.platform }} 
@@ -144,14 +144,14 @@ jobs:
144144          output : trivy-results.sarif 
145145
146146      - name : Upload Trivy scan results as artifact 
147-         uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08   #  v4.6.0 
147+         uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1   #  v4.6.1 
148148        with :
149149          name : " [${{ github.job }}-${{ matrix.image-type }}-${{ env.PLATFORM }}] Trivy scan results" 
150150          path : trivy-results.sarif 
151151          retention-days : 5 
152152
153153      - name : Upload Trivy scan results to GitHub Security tab 
154-         uses : github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a   #  v3.28.8 
154+         uses : github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d   #  v3.28.10 
155155        with :
156156          sarif_file : trivy-results.sarif 
157157
@@ -196,21 +196,21 @@ jobs:
196196        uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  #  v4.2.2
197197
198198      - name : Set up QEMU 
199-         uses : docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a   #  v3.3 .0
199+         uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392   #  v3.6 .0
200200
201201      - name : Set up Docker Buildx 
202-         uses : docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5   #  v3.8 .0
202+         uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2   #  v3.10 .0
203203
204204      - name : Set up Cosign 
205-         uses : sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da   #  v3.7.0 
205+         uses : sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a   #  v3.8.1 
206206
207207      - name : Set image name 
208208        id : image-name 
209209        run : echo "value=ghcr.io/${{ github.repository }}/fluentd" >> "$GITHUB_OUTPUT" 
210210
211211      - name : Gather build metadata 
212212        id : meta 
213-         uses : docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96   #  v5.6.1 
213+         uses : docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804   #  v5.7.0 
214214        with :
215215          images : ${{ steps.image-name.outputs.value }} 
216216          labels : | 
@@ -228,7 +228,7 @@ jobs:
228228
229229      - name : Build and push fluentd-${{ matrix.image-type }}-${{ matrix.platform }} image 
230230        id : build 
231-         uses : docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991   #  v6.13 .0
231+         uses : docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4   #  v6.15 .0
232232        with :
233233          context : images/fluentd 
234234          platforms : ${{ matrix.platform }} 
@@ -248,7 +248,7 @@ jobs:
248248          echo "PLATFORM=${platform//\//-}" >> $GITHUB_ENV 
249249
250250name : Upload digest 
251-         uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08   #  v4.6.0 
251+         uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1   #  v4.6.1 
252252        with :
253253          name : digests-${{ matrix.image-type }}-${{ env.PLATFORM }} 
254254          path : /tmp/digests/* 
@@ -299,10 +299,10 @@ jobs:
299299
300300    steps :
301301      - name : Set up Docker Buildx 
302-         uses : docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5   #  v3.8 .0
302+         uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2   #  v3.10 .0
303303
304304      - name : Set up Cosign 
305-         uses : sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da   #  v3.7.0 
305+         uses : sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a   #  v3.8.1 
306306
307307      - name : Login to GitHub Container Registry 
308308        uses : docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567  #  v3.3.0
@@ -312,15 +312,15 @@ jobs:
312312          password : ${{ github.token }} 
313313
314314      - name : Download digests 
315-         uses : actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16   #  v4.1.8 
315+         uses : actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806   #  v4.1.9 
316316        with :
317317          path : /tmp/digests 
318318          pattern : digests-${{ matrix.image-type }}-* 
319319          merge-multiple : true 
320320
321321      - name : Gather build metadata 
322322        id : meta 
323-         uses : docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96   #  v5.6.1 
323+         uses : docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804   #  v5.7.0 
324324        with :
325325          images : ${{ needs.fluentd-image-push.outputs.name }} 
326326          flavor : | 
@@ -387,13 +387,13 @@ jobs:
387387          output : trivy-results.sarif 
388388
389389      - name : Upload Trivy scan results as artifact 
390-         uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08   #  v4.6.0 
390+         uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1   #  v4.6.1 
391391        with :
392392          name : " [${{ github.job }}-${{ matrix.image-type }}] Trivy scan results" 
393393          path : trivy-results.sarif 
394394          retention-days : 5 
395395
396396      - name : Upload Trivy scan results to GitHub Security tab 
397-         uses : github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a   #  v3.28.8 
397+         uses : github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d   #  v3.28.10 
398398        with :
399399          sarif_file : trivy-results.sarif 
0 commit comments