4343 - name : Set up QEMU
4444 uses : docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
4545 - name : Set up Docker Buildx
46- uses : docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
46+ uses : docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
4747 # set image version
4848 - name : Set main-branch environment
4949 if : env.BUILD_CONTEXT == 'main'
@@ -57,14 +57,14 @@ jobs:
5757 echo "VERSION=${{ github.ref_name }}" >> $GITHUB_ENV
5858 # docker login
5959 - name : Log in to the Container registry
60- uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
60+ uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
6161 with :
6262 registry : ${{ env.IMG_REGISTRY }}
6363 username : ${{ env.DOCKER_USER }}
6464 password : ${{ env.DOCKER_PWD }}
6565 - name : Extract metadata (tags, labels) for Docker
6666 id : meta
67- uses : docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0 .0
67+ uses : docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1 .0
6868 with :
6969 images : " ${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}"
7070 tags : |
7373 type=raw,value=main,enable=${{ env.BUILD_CONTEXT == 'main' }}
7474 - name : Build and push Docker image
7575 id : build-push
76- uses : docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7
76+ uses : docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7
7777 with :
7878 context : .
7979 file : ./cmd/controller/Dockerfile.controller
8585 cache-to : type=gha,mode=max
8686 provenance : mode=max
8787 - name : Install Cosign
88- uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v3
88+ uses : sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v3
8989 - name : Sign image with cosign
9090 run : |
9191 cosign sign --yes "${{ env.IMG_REGISTRY }}/${{ env.IMG_ORG }}/${{ env.IMG_REPO }}@${{ steps.build-push.outputs.digest }}"
0 commit comments