From c3ef729149ca0330c14fb7e970d669e3c5dff5cf Mon Sep 17 00:00:00 2001 From: Luis Pabon Date: Tue, 18 Jun 2024 10:09:01 +0100 Subject: [PATCH 1/3] Update github action versions Changes: * Update docker actions to newest major version * Update actions/checkout * Update tj-actions/changed-files * Clean up somewhat the codeql action and ensure it runs on pull requests --- .github/workflows/build-publish.yaml | 12 ++++++------ .github/workflows/codeql-analysis.yml | 14 ++------------ 2 files changed, 8 insertions(+), 18 deletions(-) diff --git a/.github/workflows/build-publish.yaml b/.github/workflows/build-publish.yaml index a7a8d42..f851789 100644 --- a/.github/workflows/build-publish.yaml +++ b/.github/workflows/build-publish.yaml @@ -14,16 +14,16 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Set up QEMU - uses: docker/setup-qemu-action@v2 + uses: docker/setup-qemu-action@v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2 + uses: docker/setup-buildx-action@v3 - name: Login to DockerHub - uses: docker/login-action@v2 + uses: docker/login-action@v3 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -37,13 +37,13 @@ jobs: - name: Check if release version has been bumped id: release_file_changed - uses: tj-actions/changed-files@v37 + uses: tj-actions/changed-files@v44 with: files: | release - name: Build & push container image - uses: docker/build-push-action@v3 + uses: docker/build-push-action@v6 with: context: . platforms: linux/amd64,linux/arm64 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index ff18ddf..edec0d5 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -1,20 +1,10 @@ name: "Code Scanning - Action" on: - push: - branches: [master] pull_request: + push: branches: [master] schedule: - # ┌───────────── minute (0 - 59) - # │ ┌───────────── hour (0 - 23) - # │ │ ┌───────────── day of the month (1 - 31) - # │ │ │ ┌───────────── month (1 - 12 or JAN-DEC) - # │ │ │ │ ┌───────────── day of the week (0 - 6 or SUN-SAT) - # │ │ │ │ │ - # │ │ │ │ │ - # │ │ │ │ │ - # * * * * * - cron: '30 1 * * 0' jobs: @@ -32,7 +22,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL From 0211a5451669ea7c0541410dca3580ea14bc39b3 Mon Sep 17 00:00:00 2001 From: Luis Pabon Date: Tue, 18 Jun 2024 10:12:03 +0100 Subject: [PATCH 2/3] Formatting --- .github/workflows/codeql-analysis.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index edec0d5..addea5c 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -3,7 +3,7 @@ name: "Code Scanning - Action" on: pull_request: push: - branches: [master] + branches: [ master ] schedule: - cron: '30 1 * * 0' From d1662dee405b381f0161abbeccddff5c88f44126 Mon Sep 17 00:00:00 2001 From: Luis Pabon Date: Tue, 18 Jun 2024 10:12:51 +0100 Subject: [PATCH 3/3] Update codeql to v3 --- .github/workflows/codeql-analysis.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index addea5c..170df58 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -26,7 +26,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 # Override language selection by uncommenting this and choosing your languages # with: # languages: go, javascript, csharp, python, cpp, java, ruby @@ -34,7 +34,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). # If this step fails, then you should remove it and run the build manually (see below). - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 # ℹ️ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -48,4 +48,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3