Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions .github/workflows/build-test.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ jobs:
steps:
- uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
- uses: "authzed/actions/setup-go@main"
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
with:
username: "${{ env.DOCKERHUB_PUBLIC_USER }}"
password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}"
Expand Down Expand Up @@ -132,7 +132,7 @@ jobs:
steps:
- uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
- uses: "authzed/actions/setup-go@main"
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
with:
username: "${{ env.DOCKERHUB_PUBLIC_USER }}"
password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}"
Expand Down Expand Up @@ -160,7 +160,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -194,7 +194,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -229,7 +229,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -264,7 +264,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -303,7 +303,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -342,7 +342,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
if: |
needs.paths-filter.outputs.codechange == 'true'
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
if: |
needs.paths-filter.outputs.codechange == 'true'
with:
Expand Down Expand Up @@ -382,7 +382,7 @@ jobs:
cache-dependency-path: "e2e/go.sum"
- name: "Run e2e"
run: "go run mage.go test:e2e 22.1.5"
- uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7.0.1
- uses: "actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9" # v7.0.2
if: "always()"
# this upload step is really flaky, don't fail the job if it fails
continue-on-error: true
Expand Down Expand Up @@ -465,7 +465,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
- name: "Generate Protos"
run: "go run mage.go gen:proto"
- uses: "chainguard-dev/actions/nodiff@0bacfe710021b5ad6d8886a53a34c40072f2fc90" # main
- uses: "chainguard-dev/actions/nodiff@8f31e9482b447ff2c69eca944a09b4b31a4a85d0" # main
with:
path: ""
fixup-command: "go run mage.go gen:proto"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/checkbaseline-report.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
runs-on: "depot-ubuntu-24.04-small"
steps:
- uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
- uses: "astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884" # v10.3.0
- uses: "astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2" # v10.3.3
- name: "Ruff format"
run: "uv run --locked ruff format --check ."
- name: "Ruff lint"
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/keep-a-changelog.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,12 +23,12 @@ jobs:
changelog:
runs-on: "depot-ubuntu-24.04-small"
steps:
- uses: "dangoslen/changelog-enforcer@43d9d695c578fb444f2e5bd23c0e9ec7c97b1d37"
- uses: "dangoslen/changelog-enforcer@d8ac887514c8ddbb6fa82961f14106c3f80ad180"
with:
skipLabels: "Skip-Changelog,dependencies,tests"
missingUpdateErrorMessage: "If your PR has a change that users might care about, please add an entry to CHANGELOG.md, run 'npx keep-a-changelog', and commit the changes. Otherwise, add the Skip-Changelog label to your PR."
- uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
- uses: "actions/setup-node@820762786026740c76f36085b0efc47a31fe5020" # v7.0.0
- uses: "actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1" # v7.1.0
- run: "npx keep-a-changelog@2.8.0"
- run: |
files=$(git status --porcelain)
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
- name: "Generate docs"
run: "go run mage.go gen:docs"
- uses: "chainguard-dev/actions/nodiff@0bacfe710021b5ad6d8886a53a34c40072f2fc90" # main
- uses: "chainguard-dev/actions/nodiff@8f31e9482b447ff2c69eca944a09b4b31a4a85d0" # main
with:
path: ""
fixup-command: "mage gen:docs"
Expand All @@ -47,7 +47,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
- name: "Lint Everything"
run: "go run mage.go lint:all"
- uses: "chainguard-dev/actions/nodiff@0bacfe710021b5ad6d8886a53a34c40072f2fc90" # main
- uses: "chainguard-dev/actions/nodiff@8f31e9482b447ff2c69eca944a09b4b31a4a85d0" # main
with:
path: ""
fixup-command: "go run mage.go lint:all"
2 changes: 1 addition & 1 deletion .github/workflows/nightly.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
dockerhub_token: "${{ secrets.DOCKERHUB_ACCESS_TOKEN }}"
- uses: "docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1" # v4.4.0
- uses: "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069" # v4.4.1
- uses: "goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94" # v7.2.3
- uses: "goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de" # v7.3.0
with:
distribution: "goreleaser-pro"
version: "2.15.2"
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/release-windows.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ jobs:
with:
fetch-depth: 0
- uses: "authzed/actions/setup-go@main"
- uses: "nowsprinting/check-version-format-action@af8787bf5058bea78ecc228899471187575e48c3" # v5.0.6
- uses: "nowsprinting/check-version-format-action@62b39fce3eab26b761544e58016e2183d7a73c0b" # v5.0.8
id: "version"
with:
prefix: "v"
Expand All @@ -27,7 +27,7 @@ jobs:
quayio_token: "${{ secrets.QUAYIO_PASSWORD }}"
github_token: "${{ secrets.GITHUB_TOKEN }}"
dockerhub_token: "${{ secrets.DOCKERHUB_ACCESS_TOKEN }}"
- uses: "goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94" # v7.2.3
- uses: "goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de" # v7.3.0
with:
distribution: "goreleaser-pro"
# NOTE: keep in sync with goreleaser version in other job.
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
with:
fetch-depth: 0
- uses: "authzed/actions/setup-go@main"
- uses: "nowsprinting/check-version-format-action@af8787bf5058bea78ecc228899471187575e48c3" # v5.0.6
- uses: "nowsprinting/check-version-format-action@62b39fce3eab26b761544e58016e2183d7a73c0b" # v5.0.8
id: "version"
with:
prefix: "v"
Expand Down Expand Up @@ -67,7 +67,7 @@ jobs:
dockerhub_token: "${{ secrets.DOCKERHUB_ACCESS_TOKEN }}"
- uses: "docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1" # v4.4.0
- uses: "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069" # v4.4.1
- uses: "goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94" # v7.2.3
- uses: "goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de" # v7.3.0
with:
distribution: "goreleaser-pro"
# NOTE: keep in sync with goreleaser version in other job.
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/security.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ jobs:
# trivy does not flag an old SpiceDB version
fetch-depth: 0
- uses: "authzed/actions/setup-go@main"
- uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4.6.0
- uses: "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6" # v4.7.0
with:
username: "${{ env.DOCKERHUB_PUBLIC_USER }}"
password: "${{ env.DOCKERHUB_PUBLIC_ACCESS_TOKEN }}"
Expand All @@ -66,7 +66,7 @@ jobs:
env:
TRIVY_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-db"
TRIVY_JAVA_DB_REPOSITORY: "public.ecr.aws/aquasecurity/trivy-java-db"
- uses: "goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94" # v7.2.3
- uses: "goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de" # v7.3.0
id: "goreleaser"
with:
distribution: "goreleaser-pro"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wasm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
- uses: "authzed/actions/setup-go@main"
- name: "Build WASM"
run: "go run mage.go build:wasm"
- uses: "shogo82148/actions-upload-release-asset@aaba0f56bdbc1071f4af234d5cb16055e8a400de" # v1.10.4
- uses: "shogo82148/actions-upload-release-asset@73f83b114970a3485e1423ecc1fb93d887c9b096" # v1.10.7
with:
upload_url: "${{ github.event.release.upload_url }}"
asset_path: "dist/*"
Loading