From b38e5a37a0829a420f8a549eb0978f03cb7e37bf Mon Sep 17 00:00:00 2001 From: Lee Ivy Date: Fri, 20 Sep 2024 08:42:11 -0700 Subject: [PATCH 1/2] Issue 418: remove deprecated codeql action v2 in workflows; change v2 to v3 in two actions --- .github/workflows/dockerfile-linter.yml | 2 +- .github/workflows/terraform-security.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dockerfile-linter.yml b/.github/workflows/dockerfile-linter.yml index 89f8cb4..08d6525 100644 --- a/.github/workflows/dockerfile-linter.yml +++ b/.github/workflows/dockerfile-linter.yml @@ -43,7 +43,7 @@ jobs: no-fail: true - name: Upload analysis results to GitHub - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: hadolint-results.sarif wait-for-processing: true \ No newline at end of file diff --git a/.github/workflows/terraform-security.yml b/.github/workflows/terraform-security.yml index ea0b88e..65edce6 100644 --- a/.github/workflows/terraform-security.yml +++ b/.github/workflows/terraform-security.yml @@ -34,7 +34,7 @@ jobs: sarif_file: tfsec.sarif - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: # Path to SARIF file relative to the root of the repository sarif_file: tfsec.sarif From 35d470efb6c6665756142a0b6ba6c7da8bc2ab8e Mon Sep 17 00:00:00 2001 From: Lee Ivy Date: Fri, 20 Sep 2024 12:20:38 -0700 Subject: [PATCH 2/2] Fix syntax error that caused build failure --- .github/workflows/dockerhub-image-build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dockerhub-image-build.yml b/.github/workflows/dockerhub-image-build.yml index dbf7b8f..8211bfa 100644 --- a/.github/workflows/dockerhub-image-build.yml +++ b/.github/workflows/dockerhub-image-build.yml @@ -51,7 +51,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - * name: Generate artifact attestation + - name: Generate artifact attestation uses: actions/attest-build-provenance@v1 with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}