diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e4f0195..726bfb9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,13 +22,13 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v4 - name: Unshallow run: git fetch --prune --unshallow - name: Set up Go - uses: actions/setup-go@v2 + uses: actions/setup-go@v5 with: go-version: 1.21 - @@ -43,10 +43,10 @@ jobs: PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v2 + uses: goreleaser/goreleaser-action@v5 with: version: latest - args: release --rm-dist + args: release --clean env: GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }} # GitHub sets this automatically diff --git a/.github/workflows/salus.yaml b/.github/workflows/salus.yaml index 195966c..997e811 100644 --- a/.github/workflows/salus.yaml +++ b/.github/workflows/salus.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest name: Semgrep steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Scan id: scan run: | @@ -22,16 +22,16 @@ jobs: runs-on: ubuntu-latest name: Salus Security Scan steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Salus Scan id: salus_scan - uses: federacy/scan-action@0.1.4 + uses: federacy/scan-action@0.1.5 env: SALUS_CONFIGURATION: "file://salus-config.yaml" with: report_uri: file://./salus-report.txt report_format: txt - - uses: actions/upload-artifact@master + - uses: actions/upload-artifact@v4 if: failure() with: name: Scan results diff --git a/.github/workflows/vulncheck.yaml b/.github/workflows/vulncheck.yaml index 9562f08..d30b2ca 100644 --- a/.github/workflows/vulncheck.yaml +++ b/.github/workflows/vulncheck.yaml @@ -6,18 +6,15 @@ on: schedule: - cron: '28 1 * * *' -permissions: - contents: read # to fetch code (actions/checkout) - jobs: vulncheck: name: Analysis runs-on: ubuntu-latest steps: - name: Check out code into the Go module directory - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: Set up Go - uses: actions/setup-go@v3 + uses: actions/setup-go@v5 with: go-version: '1.21' check-latest: true diff --git a/.goreleaser.yml b/.goreleaser.yml index 8c1ff49..62f381a 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -45,4 +45,4 @@ release: # If you want to manually examine the release before its live, uncomment this line: # draft: true changelog: - skip: true + disable: true