diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7d3ade7..0ccce26 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -30,7 +30,7 @@ jobs: - image: alpine-bash steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set Image Org # sets the default IMAGE_ORG to openebs @@ -54,7 +54,7 @@ jobs: - name: Docker meta id: docker_meta - uses: docker/metadata-action@v4 + uses: docker/metadata-action@v6 with: # add each registry to which the image needs to be pushed here images: | @@ -70,38 +70,38 @@ jobs: echo "${{ steps.docker_meta.outputs.tags }}" - name: Setup QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 with: platforms: all - name: Setup Docker Buildx id: buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: version: v0.13.1 - name: Login to DockerHub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Login to Quay - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} password: ${{ secrets.QUAY_TOKEN }} - name: Login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Build & Push Image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: file: ./dockerfiles/${{ matrix.image }}/Dockerfile push: true diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 35918d3..9cf18af 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -8,9 +8,9 @@ jobs: fossa-scan: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: submodules: recursive - - uses: fossas/fossa-action@v1.4.0 + - uses: fossas/fossa-action@v2.0.0 with: api-key: ${{ secrets.FOSSA_API_KEY }} diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml index 1c014e5..4984a41 100644 --- a/.github/workflows/pull_request.yml +++ b/.github/workflows/pull_request.yml @@ -33,21 +33,21 @@ jobs: - image: alpine-bash steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 with: platforms: all - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: version: v0.13.1 - name: Build Image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: file: ./dockerfiles/${{ matrix.image }}/Dockerfile push: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4e29cb4..5f7e802 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: - image: alpine-bash steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set Image Org # sets the default IMAGE_ORG to openebs @@ -50,7 +50,7 @@ jobs: - name: Docker meta id: docker_meta - uses: docker/metadata-action@v4 + uses: docker/metadata-action@v6 with: # add each registry to which the image needs to be pushed here images: | @@ -66,38 +66,38 @@ jobs: echo "RELEASE TAG: ${RELEASE_TAG}" - name: Setup QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 with: platforms: all - name: Setup Docker Buildx id: buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: version: v0.13.1 - name: Login to DockerHub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Login to Quay - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} password: ${{ secrets.QUAY_TOKEN }} - name: Login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Build & Push Image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: file: ./dockerfiles/${{ matrix.image }}/Dockerfile push: true diff --git a/.github/workflows/trivy-ci.yml b/.github/workflows/trivy-ci.yml index 221439c..9535d59 100644 --- a/.github/workflows/trivy-ci.yml +++ b/.github/workflows/trivy-ci.yml @@ -21,21 +21,21 @@ jobs: - image: alpine-bash steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 with: platforms: all - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 with: version: v0.13.1 - name: Build Image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: file: ./dockerfiles/${{ matrix.image }}/Dockerfile push: false @@ -45,7 +45,7 @@ jobs: openebs/${{ matrix.image }}:ci - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@v0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: 'openebs/${{ matrix.image }}:ci' format: 'sarif'