Skip to content

Commit 3f4870c

Browse files
l0wl3vell0wl3vel
authored
Merge branch 'master' into fix/webhook-availability
2 parents 262f5c4 + d0905ae commit 3f4870c

18 files changed

+45
-45
lines changed

‎.github/workflows/benchmark.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
pull-requests: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
20+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2121
with:
2222
egress-policy: audit
2323

‎.github/workflows/check-manifest.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,15 @@ jobs:
3232
timeout-minutes: 10
3333
steps:
3434
- name: Harden Runner
35-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
35+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3636
with:
3737
egress-policy: audit
3838

3939
- name: Check out code into the Go module directory
4040
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4141

4242
- name: Set up Go
43-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
43+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
4444
with:
4545
go-version: "1.23"
4646
check-latest: true

‎.github/workflows/codeql.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -17,20 +17,20 @@ jobs:
1717

1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
20+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2121
with:
2222
egress-policy: audit
2323

2424
- name: Checkout repository
2525
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
2626

2727
- name: Initialize CodeQL
28-
uses: github/codeql-action/init@babb554ede22fd5605947329c4d04d8e7a0b8155
28+
uses: github/codeql-action/init@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd
2929
with:
3030
languages: go
3131

3232
- name: Autobuild
33-
uses: github/codeql-action/autobuild@babb554ede22fd5605947329c4d04d8e7a0b8155
33+
uses: github/codeql-action/autobuild@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd
3434

3535
- name: Perform CodeQL Analysis
36-
uses: github/codeql-action/analyze@babb554ede22fd5605947329c4d04d8e7a0b8155
36+
uses: github/codeql-action/analyze@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd

‎.github/workflows/dapr-pubsub.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
DAPR_VERSION: ["1.12"]
2121
steps:
2222
- name: Harden Runner
23-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
23+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2424
with:
2525
egress-policy: audit
2626

@@ -60,7 +60,7 @@ jobs:
6060
kubectl logs -n gatekeeper-system -l control-plane=audit-controller --tail=-1 > logs-audit-publish.json
6161
6262
- name: Upload artifacts
63-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
63+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
6464
if: ${{ always() }}
6565
with:
6666
name: pubsub-logs

‎.github/workflows/dependency-review.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-22.04
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
20+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2121
with:
2222
egress-policy: audit
2323

‎.github/workflows/license-lint.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ jobs:
2525
contents: read
2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
28+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2929
with:
3030
egress-policy: audit
3131

3232
- name: Set up Go
33-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
33+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
3434
with:
3535
go-version: "1.23"
3636
check-latest: true

‎.github/workflows/lint.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
runs-on: ubuntu-22.04
3434
steps:
3535
- name: Harden Runner
36-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
36+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3737
with:
3838
egress-policy: audit
3939

‎.github/workflows/patch-docs.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-22.04
1414
steps:
1515
- name: Harden Runner
16-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
16+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
1717
with:
1818
egress-policy: audit
1919

@@ -52,7 +52,7 @@ jobs:
5252
make patch-version-docs NEWVERSION=v${MAJOR_VERSION}.${MINOR_VERSION}.x TAG=v${TAG} OLDVERSION=v${MAJOR_VERSION}.${MINOR_VERSION}.$((PATCH_VERSION-1)) OPA_VERSIONS="${versions}"
5353
5454
- name: Create release pull request
55-
uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
55+
uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
5656
with:
5757
commit-message: "chore: Patch docs for ${{ env.TAG }} release"
5858
title: "chore: Patch docs for ${{ env.TAG }} release"

‎.github/workflows/pre-release.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
packages: write
2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
25+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2626
with:
2727
egress-policy: audit
2828

‎.github/workflows/release-pr.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-22.04
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
21+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
2222
with:
2323
egress-policy: audit
2424

2525
- name: Set up Go
26-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
26+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
2727
with:
2828
go-version: "1.23"
2929
check-latest: true
@@ -91,7 +91,7 @@ jobs:
9191
make version-docs NEWVERSION=v${MAJOR_VERSION}.${MINOR_VERSION}.x TAG=v${TAG} OPA_VERSIONS="${versions}"
9292
9393
- name: Create release pull request
94-
uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
94+
uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f # v7.0.6
9595
with:
9696
commit-message: "chore: Prepare ${{ env.NEWVERSION }} release"
9797
title: "chore: Prepare ${{ env.NEWVERSION }} release"

‎.github/workflows/release.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@ jobs:
2727
docker system prune -a -f --filter "label!=org.opencontainers.image.source=https://github.com/stefanprodan/alpine-base"
2828
2929
- name: Harden Runner
30-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
30+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3131
with:
3232
egress-policy: audit
3333

3434
- name: Check out code into the Go module directory
3535
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
3636

3737
- name: Set up Go
38-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
38+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
3939
with:
4040
go-version: "1.23"
4141
check-latest: true

‎.github/workflows/scan-vulns.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -32,11 +32,11 @@ jobs:
3232
timeout-minutes: 15
3333
steps:
3434
- name: Harden Runner
35-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
35+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3636
with:
3737
egress-policy: audit
3838

39-
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
39+
- uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
4040
with:
4141
go-version: "1.23"
4242
check-latest: true
@@ -48,7 +48,7 @@ jobs:
4848
timeout-minutes: 15
4949
steps:
5050
- name: Harden Runner
51-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
51+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
5252
with:
5353
egress-policy: audit
5454

‎.github/workflows/scorecards.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131

3232
steps:
3333
- name: Harden Runner
34-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
34+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3535
with:
3636
egress-policy: audit
3737

@@ -63,14 +63,14 @@ jobs:
6363
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6464
# format to the repository Actions tab.
6565
- name: "Upload artifact"
66-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
66+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
6767
with:
6868
name: SARIF file
6969
path: results.sarif
7070
retention-days: 5
7171

7272
# Upload the results to GitHub's code scanning dashboard.
7373
- name: "Upload to code-scanning"
74-
uses: github/codeql-action/upload-sarif@babb554ede22fd5605947329c4d04d8e7a0b8155 # v3.27.7
74+
uses: github/codeql-action/upload-sarif@d68b2d4edb4189fd2a5366ac14e72027bd4b37dd # v3.28.2
7575
with:
7676
sarif_file: results.sarif

‎.github/workflows/test-gator.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -36,15 +36,15 @@ jobs:
3636
KUBERNETES_VERSION: ["1.29.10", "1.30.6", "1.31.2"]
3737
steps:
3838
- name: Harden Runner
39-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
39+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
4040
with:
4141
egress-policy: audit
4242

4343
- name: Check out code into the Go module directory
4444
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4545

4646
- name: Set up Go
47-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
47+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
4848
with:
4949
go-version: "1.23"
5050
check-latest: true

‎.github/workflows/unit-test.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,15 @@ jobs:
3232
timeout-minutes: 20
3333
steps:
3434
- name: Harden Runner
35-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
35+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3636
with:
3737
egress-policy: audit
3838

3939
- name: Check out code into the Go module directory
4040
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4141

4242
- name: Set up Go
43-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
43+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
4444
with:
4545
go-version: "1.23"
4646
check-latest: true
@@ -49,7 +49,7 @@ jobs:
4949
run: make native-test
5050

5151
- name: Codecov Upload
52-
uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
52+
uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303 # v5.1.2
5353
with:
5454
flags: unittests
5555
file: ./cover.out

‎.github/workflows/upgrade.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
HELM_VERSION: ["3.14.1"]
2727
steps:
2828
- name: Harden Runner
29-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
29+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3030
with:
3131
egress-policy: audit
3232

@@ -98,7 +98,7 @@ jobs:
9898
kubectl logs -n gatekeeper-system -l run=dummy-provider --tail=-1 > logs-${{ matrix.HELM_VERSION }}-dummy-provider-post-upgrade.json
9999
100100
- name: Upload artifacts
101-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
101+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
102102
if: ${{ always() }}
103103
with:
104104
name: logs

‎.github/workflows/website.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
working-directory: website
2727
steps:
2828
- name: Harden Runner
29-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
29+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
3030
with:
3131
egress-policy: audit
3232

@@ -65,12 +65,12 @@ jobs:
6565
runs-on: ubuntu-22.04
6666
steps:
6767
- name: Harden Runner
68-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
68+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
6969
with:
7070
egress-policy: audit
7171

7272
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v3.5.2
7373

74-
- uses: crate-ci/typos@2872c382bb9668d4baa5eade234dcbc0048ca2cf # v1.28.2
74+
- uses: crate-ci/typos@685eb3d55be2f85191e8c84acb9f44d7756f84ab # v1.29.4
7575
with:
7676
files: ./website/docs ./website/versioned_docs

‎.github/workflows/workflow.yaml

+8-8
Original file line numberDiff line numberDiff line change
@@ -36,15 +36,15 @@ jobs:
3636
KUBERNETES_VERSION: ["1.29.10", "1.30.6", "1.31.2"]
3737
steps:
3838
- name: Harden Runner
39-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
39+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
4040
with:
4141
egress-policy: audit
4242

4343
- name: Check out code into the Go module directory
4444
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4545

4646
- name: Set up Go
47-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
47+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
4848
with:
4949
go-version: "1.23"
5050
check-latest: true
@@ -80,7 +80,7 @@ jobs:
8080
kubectl logs -n gatekeeper-system -l control-plane=audit-controller --tail=-1 > logs-audit.json
8181
8282
- name: Upload artifacts
83-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
83+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
8484
if: ${{ always() }}
8585
with:
8686
name: logs-${{ matrix.KUBERNETES_VERSION }}
@@ -98,7 +98,7 @@ jobs:
9898
GATEKEEPER_NAMESPACE: ["gatekeeper-system", "custom-namespace"]
9999
steps:
100100
- name: Harden Runner
101-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
101+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
102102
with:
103103
egress-policy: audit
104104

@@ -150,7 +150,7 @@ jobs:
150150
kubectl logs -n ${{ matrix.GATEKEEPER_NAMESPACE }} -l run=dummy-provider --tail=-1 > logs-helm-${{ matrix.HELM_VERSION }}-${{ matrix.GATEKEEPER_NAMESPACE }}-dummy-provider.json
151151
152152
- name: Upload artifacts
153-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
153+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
154154
if: ${{ always() }}
155155
with:
156156
name: helm-logs-${{ matrix.HELM_VERSION }}-${{ matrix.GATEKEEPER_NAMESPACE }}
@@ -164,15 +164,15 @@ jobs:
164164

165165
steps:
166166
- name: Harden Runner
167-
uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
167+
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
168168
with:
169169
egress-policy: audit
170170

171171
- name: Check out code into the Go module directory
172172
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
173173

174174
- name: Set up Go
175-
uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
175+
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
176176
with:
177177
go-version: "1.23"
178178
check-latest: true
@@ -207,7 +207,7 @@ jobs:
207207
kubectl logs -n gatekeeper-system -l control-plane=audit-controller --tail=-1 > logs-generatorexpansion-audit.json
208208
209209
- name: Upload artifacts
210-
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
210+
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
211211
if: ${{ always() }}
212212
with:
213213
name: generatorexpansion-logs

0 commit comments

Comments
 (0)