[deps]: Update gh minor (#495)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot]
2026-05-12 11:24:34 -06:00
committed by GitHub
parent 501cd7e511
commit 5f73b43d42

View File

@@ -77,7 +77,7 @@ jobs:
push_to_ghcr: ${{ steps.set-server-variables.outputs.push_to_ghcr }}
steps:
- name: Checkout Repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
ref: ${{ inputs.self_host_repo_ref || github.event.client_payload.self_host_repo_ref || github.ref }}
persist-credentials: false
@@ -136,7 +136,7 @@ jobs:
security-events: write
steps:
- name: Checkout Repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
ref: ${{ inputs.self_host_repo_ref || github.event.client_payload.self_host_repo_ref || github.ref }}
persist-credentials: false
@@ -250,7 +250,7 @@ jobs:
- name: Build and push Docker image
id: build-docker
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
with:
context: .
file: bitwarden-lite/Dockerfile
@@ -267,7 +267,7 @@ jobs:
- name: Install Cosign
if: steps.check-secrets.outputs.has_secrets == 'true'
uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
- name: Sign image with Cosign
if: steps.check-secrets.outputs.has_secrets == 'true'
@@ -285,7 +285,7 @@ jobs:
- name: Scan Docker image
if: steps.check-secrets.outputs.has_secrets == 'true'
id: container-scan
uses: anchore/scan-action@f6601287cdb1efc985d6b765bbf99cb4c0ac29d8 # v7.0.0
uses: anchore/scan-action@e1165082ffb1fe366ebaf02d8526e7c4989ea9d2 # v7.4.0
with:
image: ${{ steps.image-ref.outputs.acr_image }}
fail-build: false
@@ -293,7 +293,7 @@ jobs:
- name: Upload Grype results to GitHub
if: steps.check-secrets.outputs.has_secrets == 'true'
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
with:
sarif_file: ${{ steps.container-scan.outputs.sarif }}
sha: ${{ contains(github.event_name, 'pull_request') && github.event.pull_request.head.sha || github.sha }}