Skip to content

Commit 6e4de4c

Browse files
dependabot[bot]poiana
authored andcommitted
chore(deps): bump the actions group with 4 updates
Bumps the actions group with 4 updates: [helm/kind-action](https://github.com/helm/kind-action), [slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator), [slsa-framework/slsa-verifier](https://github.com/slsa-framework/slsa-verifier) and [slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator). Updates `helm/kind-action` from 1.8.0 to 1.13.0 - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](helm/kind-action@dda0770...92086f6) Updates `slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](slsa-framework/slsa-github-generator@v2.0.0...v2.1.0) Updates `slsa-framework/slsa-verifier` from 2.5.1 to 2.7.1 - [Release notes](https://github.com/slsa-framework/slsa-verifier/releases) - [Changelog](https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md) - [Commits](slsa-framework/slsa-verifier@v2.5.1...v2.7.1) Updates `slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](slsa-framework/slsa-github-generator@v2.0.0...v2.1.0) --- updated-dependencies: - dependency-name: helm/kind-action dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: slsa-framework/slsa-verifier dependency-version: 2.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 116d6f4 commit 6e4de4c

2 files changed

Lines changed: 4 additions & 4 deletions

File tree

.github/workflows/integration.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -96,7 +96,7 @@ jobs:
9696
run: go install github.com/onsi/ginkgo/v2/ginkgo@v2.11.0 #Make sure that it is at the same version as the library used in the project.
9797

9898
- name: Create KIND Cluster
99-
uses: helm/kind-action@dda0770415bac9fc20092cacbc54aa298604d140 # v1.8.0
99+
uses: helm/kind-action@92086f6be054225fa813e0a4b13787fc9088faab # v1.13.0
100100
with:
101101
config: ./test/e2e/kind/config.yaml
102102

.github/workflows/release.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
actions: read # To read the workflow path.
5454
id-token: write # To sign the provenance.
5555
contents: write # To add assets to a release.
56-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
56+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
5757
with:
5858
base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
5959
upload-assets: true # upload to a new release
@@ -64,7 +64,7 @@ jobs:
6464
permissions: read-all
6565
steps:
6666
- name: Install the verifier
67-
uses: slsa-framework/slsa-verifier/actions/installer@v2.5.1
67+
uses: slsa-framework/slsa-verifier/actions/installer@v2.7.1
6868

6969
- name: Download assets
7070
env:
@@ -125,7 +125,7 @@ jobs:
125125
actions: read # for detecting the Github Actions environment.
126126
id-token: write # for creating OIDC tokens for signing.
127127
packages: write # for uploading attestations.
128-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.0.0
128+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v2.1.0
129129
with:
130130
image: docker.io/falcosecurity/k8s-metacollector
131131
# The image digest is used to prevent TOCTOU issues.

0 commit comments

Comments
 (0)