diff --git a/.github/workflows/ci-feedback-events.yml b/.github/workflows/ci-feedback-events.yml index 02cea74..7f49266 100644 --- a/.github/workflows/ci-feedback-events.yml +++ b/.github/workflows/ci-feedback-events.yml @@ -19,7 +19,7 @@ jobs: permissions: actions: read # Read exact completed run and job metadata. issues: write # Publish bounded failure evidence in this repository. - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml@9adc78a8a79553e1002134bd4f901dc7822d25b5 # commit:9adc78a8a79553e1002134bd4f901dc7822d25b5 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24 with: run-id: ${{ format('{0}', github.event.workflow_run.id) }} run-attempt: ${{ format('{0}', github.event.workflow_run.run_attempt) }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ed0fe6a..cd0544d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: actions: read contents: read security-events: write - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 # commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24 with: # Public repository: `pull_request` runs untrusted fork code. Name the # hosted runner explicitly — the reusable's default belongs to the pinned diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f1f44f4..ba07606 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -41,7 +41,7 @@ jobs: permissions: actions: read # verify exact public workflow evidence contents: read # read the signed annotated tag - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml@9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 # commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24 with: version: ${{ needs.resolve.outputs.version }} runner: ubuntu-latest @@ -62,7 +62,7 @@ jobs: id-token: write # mint Sigstore identity attestations: write # persist provenance and SBOM attestations artifact-metadata: write # persist attested artifact metadata - uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml@9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 # commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7 + uses: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml@37a827f921f62353664fc4bcd872f05b65efe71a # 0.1.24 with: version: ${{ needs.resolve.outputs.version }} package_name: cd-workflows diff --git a/catalog/actions.yml b/catalog/actions.yml index af47a0c..7c8b432 100644 --- a/catalog/actions.yml +++ b/catalog/actions.yml @@ -20,15 +20,15 @@ actions: - name: actions/upload-artifact sha: "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" version: "v7.0.1" + - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/ci-feedback.yml + sha: "37a827f921f62353664fc4bcd872f05b65efe71a" + version: "0.1.24" - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/public-codeql.yml - sha: "9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" - version: "commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" + sha: "37a827f921f62353664fc4bcd872f05b65efe71a" + version: "0.1.24" - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-promotion-gate.yml - sha: "9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" - version: "commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" + sha: "37a827f921f62353664fc4bcd872f05b65efe71a" + version: "0.1.24" - name: NDDev-OpenNetwork/ci-workflows/.github/workflows/release-supply-chain.yml - sha: "9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" - version: "commit:9eb9e070ae87b0fc3bdbd2cbed5afe3b92f7e2c7" - - name: NDDev-OpenNetwork/github-actions/.github/workflows/ci-feedback.yml - sha: "6064b7d98a4e6b852de7572de12b8889e8fbfe38" - version: "commit:6064b7d98a4e6b852de7572de12b8889e8fbfe38" + sha: "37a827f921f62353664fc4bcd872f05b65efe71a" + version: "0.1.24"