fix: updating GH Actions (#188)

.github/workflows/commit.yml

@@ -28,22 +28,22 @@ jobs:
  - linux/arm64
  steps:
  - name: Checkout the repository
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  with:
  fetch-depth: 0
- - uses: actions/setup-python@v4
+ - uses: actions/setup-python@v5
  with:
  python-version: ${{ env.python_version }}
- - uses: actions/cache@v3
+ - uses: actions/cache@v4
  with:
  path: ~/.local/share/virtualenvs
  key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
  - name: Install Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
  - name: Initialize the repo
  run: task -v init
  - name: Set up QEMU for cross-platform emulation
- uses: docker/setup-qemu-action@v2
+ uses: docker/setup-qemu-action@v3
  - name: Build the goat
  run: task -v build
  env:
@@ -58,20 +58,22 @@ jobs:
  run: task -v sbom
  env:
  PLATFORM: ${{ matrix.platform }}
+ - name: Set env var for unique artifact uploads
+ run: echo SANITIZED_PLATFORM="$(echo "${{ matrix.platform }}" | sed 's/\//_/g')" >> $GITHUB_ENV
  - name: Upload the SBOMs to GitHub
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
- name: SBOM
+ name: SBOM-${{ env.SANITIZED_PLATFORM }}
  path: sbom.*.json
  if-no-files-found: error
  - name: Generate vuln scan results
  run: task -v vulnscan
  env:
  PLATFORM: ${{ matrix.platform }}
  - name: Upload the vuln scan results to GitHub
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
- name: Vulns
+ name: Vulns-${{ env.SANITIZED_PLATFORM }}
  path: vulns.*.json
  if-no-files-found: error
  distribute:
@@ -83,20 +85,20 @@ jobs:
  runs-on: ubuntu-22.04
  steps:
  - name: Checkout the repository
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  with:
  token: ${{ secrets.SEISO_AUTOMATION_PAT }}
  fetch-depth: 0
  - name: Setup python
- uses: actions/setup-python@v4
+ uses: actions/setup-python@v5
  with:
  python-version: ${{ env.python_version }}
- - uses: actions/cache@v3
+ - uses: actions/cache@v4
  with:
  path: ~/.local/share/virtualenvs
  key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
  - name: Install Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
  - name: Initialize the repo
  run: task -v init
  - name: Update and bump the version
@@ -105,12 +107,12 @@ jobs:
  TAG="$(git describe --tags)"
  echo "TAG=${TAG}" >> "${GITHUB_ENV}"
  - name: Log in to Docker Hub
- uses: docker/login-action@v2
+ uses: docker/login-action@v3
  with:
  username: ${{ secrets.DOCKERHUB_USERNAME }}
  password: ${{ secrets.DOCKERHUB_TOKEN }}
  - name: Set up QEMU for cross-platform emulation
- uses: docker/setup-qemu-action@v2
+ uses: docker/setup-qemu-action@v3
  - name: Build and publish all the supported images to Docker Hub
  run: task -v publish
  env:
@@ -119,24 +121,26 @@ jobs:
  run: task -v sbom
  env:
  PLATFORM: all
+ - name: Set env var for unique artifact uploads
+ run: echo SANITIZED_PLATFORM="$(echo "${{ matrix.platform }}" | sed 's/\//_/g')" >> $GITHUB_ENV
  - name: Upload the SBOMs to GitHub
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
- name: SBOM
+ name: SBOM-${{ env.SANITIZED_PLATFORM }}
  path: sbom.*.json
  if-no-files-found: error
  - name: Generate vuln scan results
  run: task -v vulnscan
  env:
  PLATFORM: all
  - name: Upload the vuln scan results to GitHub
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
- name: Vulns
+ name: Vulns-${{ env.SANITIZED_PLATFORM }}
  path: vulns.*.json
  if-no-files-found: error
  - name: Publish the release README to Docker Hub
- uses: peter-evans/dockerhub-description@v3
+ uses: peter-evans/dockerhub-description@v4
  with:
  username: ${{ secrets.DOCKERHUB_USERNAME }}
  password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -147,7 +151,7 @@ jobs:
  BRANCH="$(git branch --show-current)"
  git push --atomic origin "${BRANCH}" "${{ env.TAG }}"
  - name: Publish the release to GitHub
- uses: softprops/action-gh-release@v1
+ uses: softprops/action-gh-release@v2
  env:
  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
  with:

.github/workflows/update.yml

@@ -18,22 +18,22 @@ jobs:
  pull-requests: write
  steps:
  - name: Checkout the repository
- uses: actions/checkout@v3
- - uses: actions/setup-python@v4
+ uses: actions/checkout@v4
+ - uses: actions/setup-python@v5
  with:
  python-version: ${{ env.python_version }}
- - uses: actions/cache@v3
+ - uses: actions/cache@v4
  with:
  path: ~/.local/share/virtualenvs
  key: ${{ runner.os }}-python-${{ env.python_version }}-pipenv-${{ hashFiles('Pipfile.lock') }}
  - name: Install Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
  - name: Initialize the repo
  run: task -v init
  - name: Update the repository
  run: task -v update
  - name: Create or update a pull request
- uses: peter-evans/create-pull-request@v4
+ uses: peter-evans/create-pull-request@v6
  with:
  title: Automated update to primary components
  commit-message: Automated update to primary components