Update module github.com/google/cel-go to v0.30.0 [SECURITY] (#1114) #798

	name: Build and Push
	on:
	push:
	branches:
	- main
	tags:
	- "*"
	workflow_dispatch:

	permissions:
	contents: read
	actions: read
	id-token: write

	jobs:
	build-push:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
	with:
	disable-sudo: true
	egress-policy: block
	allowed-endpoints: >
	api.github.com:443
	github.com:443
	auth.docker.io:443
	index.docker.io:443
	identity.docker.com:443
	registry-1.docker.io:443
	production.cloudflare.docker.com:443
	production.cloudfront.docker.com:443
	gcr.io:443
	golang.org:443
	go.dev:443
	proxy.golang.org:443
	dl.google.com:443
	dl.k8s.io:443
	sum.golang.org:443
	*.githubusercontent.com:443
	storage.googleapis.com:443
	mise.jdx.dev:443
	mise-versions.jdx.dev:443
	tuf-repo-cdn.sigstore.dev:443

	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Set up Mise
	uses: jdx/mise-action@dba19683ed58901619b14f395a24841710cb4925 # v4.1.0
	with:
	install_args: go ko

	- name: Login to Docker Hub
	uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
	env:
	DOCKERHUB_OIDC_CONNECTIONID: ${{ secrets.DOCKERHUB_OIDC_CONNECTIONID }}
	with:
	username: ${{ github.repository_owner }}

	- name: Publish image with ko
	env:
	KO_DOCKER_REPO: docker.io/linode/cluster-api-provider-linode
	IMAGE_VERSION: ${{ github.ref_name }}
	run: mise run ko-publish

Navigation Menu