Skip to content

Commit c65442f

Browse files
mcollins-ttdmcollins-ttd
committed
chore: upgrade GitHub Actions from Node 20 to Node 24
1 parent d97ccfa commit c65442f

7 files changed

Lines changed: 290 additions & 290 deletions

‎.github/workflows/build-uid2-ami.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
enclave_id: ${{ steps.buildAMI.outputs.enclave_id }}
3939
steps:
4040
- name: Checkout repo
41-
uses: actions/checkout@v4
41+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4242

4343
- name: Build UID2 Operator AMI
4444
id: buildAMI
@@ -78,7 +78,7 @@ jobs:
7878
enclave_id: ${{ steps.buildAMI.outputs.enclave_id }}
7979
steps:
8080
- name: Checkout repo
81-
uses: actions/checkout@v4
81+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
8282

8383
- name: Pre-cleanup
8484
shell: bash
@@ -123,26 +123,26 @@ jobs:
123123
needs: [buildUID2, testUID2Ami, testEUIDAmi]
124124
steps:
125125
- name: Download UID2 artifacts
126-
uses: actions/download-artifact@v4
126+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
127127
with:
128128
name: uid2_AMI_measurement
129129
path: ./artifacts
130130

131131
- name: Download EUID artifacts
132-
uses: actions/download-artifact@v4
132+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
133133
with:
134134
name: euid_AMI_measurement
135135
path: ./artifacts
136136

137137
- name: Delete staging artifacts
138-
uses: geekyeggo/delete-artifact@b54d29a59e55046d1f7fc8226cdda507e6b9cf62 # v5
138+
uses: geekyeggo/delete-artifact@176a747ab7e287e3ff4787bf8a148716375ca118 # v6.0.0
139139
with:
140140
name: |
141141
uid2_AMI_measurement
142142
euid_AMI_measurement
143143
144144
- name: Upload artifacts
145-
uses: actions/upload-artifact@v4
145+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
146146
with:
147147
name: aws-ami-ids-${{ needs.buildUID2.outputs.version_number }}
148148
path: ./artifacts/

‎.github/workflows/publish-all-operators.yaml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
release_type: ${{ inputs.release_type }}
6565

6666
- name: Checkout repo
67-
uses: actions/checkout@v4
67+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6868
with:
6969
fetch-depth: 0
7070

@@ -155,61 +155,61 @@ jobs:
155155
needs: [start, buildPublic, buildGCP, buildAzure, buildAWS, buildAMI]
156156
steps:
157157
- name: Checkout repo
158-
uses: actions/checkout@v4
158+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
159159
with:
160160
fetch-depth: 0
161161

162162
- name: Download public manifest
163-
uses: actions/download-artifact@v4
163+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
164164
with:
165165
pattern: public-image-*
166166
path: ./manifests/public_operator
167167

168168
- name: Download GCP manifest
169-
uses: actions/download-artifact@v4
169+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
170170
with:
171171
pattern: gcp-oidc-enclave-ids-*
172172
path: ./manifests/gcp_oidc_operator
173173

174174
- name: Download Azure CC manifest
175-
uses: actions/download-artifact@v4
175+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
176176
with:
177177
pattern: azure-cc-enclave-id-*
178178
path: ./manifests/azure_cc_operator
179179

180180
- name: Download Azure AKS manifest
181-
uses: actions/download-artifact@v4
181+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
182182
with:
183183
pattern: azure-aks-enclave-id-*
184184
path: ./manifests/azure_aks_operator
185185

186186
- name: Download EIF manifest
187-
uses: actions/download-artifact@v4
187+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
188188
with:
189189
pattern: 'aws-eif-enclave-ids-*'
190190
path: ./manifests/aws_eif
191191

192192
- name: Download AWS AMI manifest
193-
uses: actions/download-artifact@v4
193+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
194194
with:
195195
pattern: 'aws-ami-ids-*'
196196
path: ./manifests/aws_ami
197197

198198
- name: Download Deployment Files
199-
uses: actions/download-artifact@v4
199+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
200200
with:
201201
pattern: '*-deployment-files-*'
202202
path: ./deployment
203203

204204
- name: Upload artifacts
205-
uses: actions/upload-artifact@v4
205+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
206206
with:
207207
name: uid2-operator-release-${{ needs.start.outputs.new_version }}-manifests
208208
path: ./manifests
209209

210210
- name: Build changelog
211211
id: changelog
212-
uses: mikepenz/release-changelog-builder-action@32e3c96f29a6532607f638797455e9e98cfc703d # v4
212+
uses: mikepenz/release-changelog-builder-action@348e88fab4c37338b1e803ceb2d4a7a5db6c0833 # v6.2.2
213213
with:
214214
toTag: v${{ needs.start.outputs.new_version }}
215215
configurationJson: |
@@ -230,7 +230,7 @@ jobs:
230230
(cd manifests && zip -r ../uid2-operator-release-manifests-${{ needs.start.outputs.new_version }}.zip .)
231231
232232
- name: Create draft release
233-
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
233+
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
234234
with:
235235
name: v${{ needs.start.outputs.new_version }}
236236
body: ${{ steps.changelog.outputs.changelog }}

‎.github/workflows/publish-aws-eks-nitro-enclave-docker.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
packages: write
3838
steps:
3939
- name: Checkout
40-
uses: actions/checkout@v4
40+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4141

4242
- name: Build Docker Image for EKS Pod
4343
id: build_docker_image_uid
@@ -65,7 +65,7 @@ jobs:
6565
packages: write
6666
steps:
6767
- name: Checkout
68-
uses: actions/checkout@v4
68+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6969

7070
- name: Build Docker Image for EKS Pod
7171
id: build_docker_image_euid
@@ -128,7 +128,7 @@ jobs:
128128
echo "Enclave ID (maybe shared by other images): " ${{ needs.buildEUIDImage.outputs.enclave_id }} >> ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/manifests/aws-eks-euid-enclave-id-${{ needs.buildEUIDImage.outputs.image_tag }}.txt
129129
130130
- name: Save Manifests as build artifacts
131-
uses: actions/upload-artifact@v4
131+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
132132
with:
133133
name: aws-eks-enclave-ids-${{ needs.buildUID2Image.outputs.image_tag }}
134134
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/manifests

‎.github/workflows/publish-aws-nitro-eif.yaml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
GITHUB_CONTEXT: ${{ toJson(github) }}
5151

5252
- name: Checkout
53-
uses: actions/checkout@v4
53+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5454

5555
- name: Update Operator Version
5656
id: update_version
@@ -74,7 +74,7 @@ jobs:
7474
needs: start
7575
steps:
7676
- name: Checkout
77-
uses: actions/checkout@v4
77+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7878

7979
- name: Build UID2 AWS EIF
8080
id: build_uid2_eif
@@ -93,7 +93,7 @@ jobs:
9393
df -h
9494
9595
- name: Save UID2 eif artifact
96-
uses: actions/upload-artifact@v4
96+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9797
with:
9898
name: aws-uid2-deployment-files-${{ needs.start.outputs.new_version }}
9999
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/uid2
@@ -113,7 +113,7 @@ jobs:
113113
needs: start
114114
steps:
115115
- name: Checkout
116-
uses: actions/checkout@v4
116+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
117117

118118
- name: Build EUID AWS EIF
119119
id: build_euid_eif
@@ -132,7 +132,7 @@ jobs:
132132
df -h
133133
134134
- name: Save EUID eif artifact
135-
uses: actions/upload-artifact@v4
135+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
136136
with:
137137
name: aws-euid-deployment-files-${{ needs.start.outputs.new_version }}
138138
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/euid
@@ -157,12 +157,12 @@ jobs:
157157
df -h
158158
159159
- name: Download UID2 artifacts
160-
uses: actions/download-artifact@v4
160+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
161161
with:
162162
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/uid2
163163

164164
- name: Download EUID artifacts
165-
uses: actions/download-artifact@v4
165+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
166166
with:
167167
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/euid
168168

@@ -173,7 +173,7 @@ jobs:
173173
echo ${{ needs.buildEUIDEIF.outputs.euid_enclave_id }} >> ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/manifests/aws-euid-enclave-id-${{ needs.start.outputs.new_version }}.txt
174174
175175
- name: Save Manifests as build artifacts
176-
uses: actions/upload-artifact@v4
176+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
177177
with:
178178
name: aws-eif-enclave-ids-${{ needs.start.outputs.new_version }}
179179
path: ${{ env.ARTIFACTS_BASE_OUTPUT_DIR }}/manifests
@@ -182,7 +182,7 @@ jobs:
182182
- name: Build changelog
183183
id: github_release
184184
if: ${{ inputs.version_number_input == '' && needs.start.outputs.is_release == 'true' }}
185-
uses: mikepenz/release-changelog-builder-action@32e3c96f29a6532607f638797455e9e98cfc703d # v4
185+
uses: mikepenz/release-changelog-builder-action@348e88fab4c37338b1e803ceb2d4a7a5db6c0833 # v6.2.2
186186
with:
187187
configurationJson: |
188188
{
@@ -194,7 +194,7 @@ jobs:
194194

195195
- name: Create release
196196
if: ${{ inputs.version_number_input == '' && needs.start.outputs.is_release == 'true' }}
197-
uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2
197+
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
198198
with:
199199
name: ${{ needs.start.outputs.new_version }}
200200
body: ${{ steps.github_release.outputs.changelog }}

‎.github/workflows/publish-azure-cc-enclave-docker.yaml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ jobs:
7575
tags: ${{ steps.meta.outputs.tags }}
7676
steps:
7777
- name: Checkout
78-
uses: actions/checkout@v4
78+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7979

8080
- name: Update Operator Version
8181
id: update_version
@@ -88,7 +88,7 @@ jobs:
8888
github_token: ${{ github.ref_protected && secrets.GH_MERGE_TOKEN || '' }}
8989

9090
- name: Set up JDK
91-
uses: actions/setup-java@v4
91+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
9292
with:
9393
distribution: 'temurin'
9494
java-version: '21'
@@ -103,22 +103,22 @@ jobs:
103103
cp scripts/confidential_compute.py ${{ env.DOCKER_CONTEXT_PATH }}/
104104
105105
- name: Log in to the Docker container registry
106-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
106+
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
107107
with:
108108
registry: ${{ env.REGISTRY }}
109109
username: ${{ github.actor }}
110110
password: ${{ secrets.GITHUB_TOKEN }}
111111

112112
- name: Extract metadata (tags, labels) for Docker
113113
id: meta
114-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
114+
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
115115
with:
116116
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
117117
tags: |
118118
type=raw,value=${{ steps.update_version.outputs.image_tag }}
119119
120120
- name: Build and export to Docker
121-
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
121+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
122122
with:
123123
context: ${{ env.DOCKER_CONTEXT_PATH }}
124124
load: true
@@ -141,7 +141,7 @@ jobs:
141141
hide-progress: true
142142

143143
- name: Upload Trivy scan report to GitHub Security tab
144-
uses: github/codeql-action/upload-sarif@v3
144+
uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
145145
with:
146146
sarif_file: 'trivy-results.sarif'
147147

@@ -157,7 +157,7 @@ jobs:
157157

158158
- name: Push to Docker
159159
id: push-to-docker
160-
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5
160+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
161161
with:
162162
context: ${{ env.DOCKER_CONTEXT_PATH }}
163163
push: true
@@ -174,7 +174,7 @@ jobs:
174174
needs: buildImage
175175
steps:
176176
- name: Checkout
177-
uses: actions/checkout@v4
177+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
178178

179179
- name: Install Azure CLI
180180
uses: ./.github/actions/install_az_cli
@@ -193,14 +193,14 @@ jobs:
193193
bash ./scripts/azure-cc/deployment/generate-deployment-artifacts.sh
194194
195195
- name: Upload deployment artifacts
196-
uses: actions/upload-artifact@v4
196+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
197197
with:
198198
name: azure-cc-deployment-files-${{ needs.buildImage.outputs.jar_version }}
199199
path: ${{ env.ARTIFACTS_OUTPUT_DIR }}
200200
if-no-files-found: error
201201

202202
- name: Upload manifest
203-
uses: actions/upload-artifact@v4
203+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
204204
with:
205205
name: azure-cc-enclave-id-${{ needs.buildImage.outputs.jar_version }}
206206
path: ${{ env.MANIFEST_OUTPUT_DIR }}
@@ -222,7 +222,7 @@ jobs:
222222
needs: buildImage
223223
steps:
224224
- name: Checkout
225-
uses: actions/checkout@v4
225+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
226226

227227
- name: Install Azure CLI
228228
uses: ./.github/actions/install_az_cli
@@ -241,14 +241,14 @@ jobs:
241241
bash ./scripts/azure-aks/deployment/generate-deployment-artifacts.sh
242242
243243
- name: Upload deployment artifacts
244-
uses: actions/upload-artifact@v4
244+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
245245
with:
246246
name: azure-aks-deployment-files-${{ needs.buildImage.outputs.jar_version }}
247247
path: ${{ env.ARTIFACTS_OUTPUT_DIR }}
248248
if-no-files-found: error
249249

250250
- name: Upload manifest
251-
uses: actions/upload-artifact@v4
251+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
252252
with:
253253
name: azure-aks-enclave-id-${{ needs.buildImage.outputs.jar_version }}
254254
path: ${{ env.MANIFEST_OUTPUT_DIR }}

0 commit comments

Comments
 (0)