Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
174 changes: 0 additions & 174 deletions .github/workflows/aqua-security.yaml

This file was deleted.

4 changes: 2 additions & 2 deletions .github/workflows/fortify-android.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ jobs:
steps:
# Check out source code
- name: Check Out Source Code
uses: actions/checkout@v3
uses: actions/checkout@v4
with:
# Fetch at least the immediate parents so that if this is a pull request then we can checkout the head.
fetch-depth: 2
Expand Down Expand Up @@ -111,7 +111,7 @@ jobs:

### Clean up of build folder
- name: Save sourceanalyzer Logs
uses: actions/upload-artifact@v2
uses: actions/upload-artifact@v4
if: failure()
with:
name: scancentral-logs
Expand Down
5 changes: 3 additions & 2 deletions .github/workflows/fortify-sarif-export.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,14 +41,15 @@ jobs:
steps:
# Check out source code
- name: Check Out Source Code
uses: actions/checkout@v3
uses: actions/checkout@v4
with:
# Fetch at least the immediate parents so that if this is a pull request then we can checkout the head.
fetch-depth: 2
- name: Setup Java
uses: actions/setup-java@v1
uses: actions/setup-java@v4
with:
java-version: 11
distribution: 'temurin'
# Pull SAST issues from Fortify on Demand and generate GitHub-optimized SARIF output
- name: Export Results
uses: fortify/gha-export-vulnerabilities@v1
Expand Down
7 changes: 4 additions & 3 deletions .github/workflows/fortify.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ jobs:
steps:
# Check out source code
- name: Check Out Source Code
uses: actions/checkout@v3
uses: actions/checkout@v4
with:
# Fetch at least the immediate parents so that if this is a pull request then we can checkout the head.
fetch-depth: 2
Expand All @@ -66,9 +66,10 @@ jobs:
# Java version to use depends on the Java version required to run your build (if any),
# and the Java version supported by the ScanCentral Client version that you are running
- name: Setup Java
uses: actions/setup-java@v1
uses: actions/setup-java@v4
with:
java-version: 11
distribution: 'temurin'

### Set up Fortify ScanCentral Client ###
- name: Download Fortify ScanCentral Client
Expand All @@ -93,7 +94,7 @@ jobs:

### Archive ScanCentral Client logs on failure ###
- name: Save ScanCentral Logs
uses: actions/upload-artifact@v2
uses: actions/upload-artifact@v4
if: failure()
with:
name: scancentral-logs
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/meta.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ jobs:
actionlint:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v4
- uses: reviewdog/action-actionlint@v1
if: github.event_name == 'pull_request'
- name: Check workflow files
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/package-creation-ecr.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -46,10 +46,10 @@ jobs:

steps:
- name: Checkout repository
uses: actions/checkout@v3
uses: actions/checkout@v4

- name: configure aws credentials
uses: aws-actions/configure-aws-credentials@v1
uses: aws-actions/configure-aws-credentials@v4
with:
role-skip-session-tagging: true
role-to-assume: ${{ inputs.iam_role_arn }}
Expand All @@ -66,10 +66,10 @@ jobs:
shell: bash

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
uses: docker/setup-buildx-action@v3

- name: Build and push Docker mutable image
uses: docker/build-push-action@v3
uses: docker/build-push-action@v6
env:
REGISTRY: ${{ steps.login-ecr.outputs.registry }}
REPOSITORY: ${{ inputs.ecr_repository }}
Expand All @@ -82,7 +82,7 @@ jobs:
if: inputs.tag_mutability

- name: Build and push Docker immutable image
uses: docker/build-push-action@v3
uses: docker/build-push-action@v6
env:
REGISTRY: ${{ steps.login-ecr.outputs.registry }}
REPOSITORY: ${{ inputs.ecr_repository }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/postman-integration-testing.yml
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ jobs:
node-version: [18.x]
steps:
- name: Checkout newshub-postman collection
uses: actions/checkout@v3
uses: actions/checkout@v4
with:
repository: ${{inputs.repository_name}}
ref: ${{inputs.repository_branch}} # main branch uses the github.ref_name
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/prisma.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:

steps:
- name: Check out the repository
uses: actions/checkout@v3
uses: actions/checkout@v4

- name: Setup image tag
run: |
Expand All @@ -57,10 +57,10 @@ jobs:
shell: bash

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v2
uses: docker/setup-buildx-action@v3

- name: Build the image
uses: docker/build-push-action@v3
uses: docker/build-push-action@v6
with:
push: false
load: true
Expand All @@ -72,7 +72,7 @@ jobs:
if: inputs.action_cache != true

- name: Build the image with cache
uses: docker/build-push-action@v3
uses: docker/build-push-action@v6
with:
push: false
load: true
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/sonarqube.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
- ${{ inputs.default_runner_override_label }}
- ${{ inputs.runner_label }}
steps:
- uses: actions/checkout@v2
- uses: actions/checkout@v4
with:
fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
- uses: sonarsource/sonarqube-scan-action@master
Expand Down
Loading
Loading