From 174ca2875c44e21fffce1ff015c7056ccaef0428 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Oct 2026 06:47:38 +0000 Subject: [PATCH] chore(deps): bump the actions group with 4 updates Bumps the actions group with 4 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [chainguard-dev/actions/setup-gitsign](https://github.com/chainguard-dev/actions), [chainguard-dev/actions/gofmt](https://github.com/chainguard-dev/actions) and [chainguard-dev/actions/goimports](https://github.com/chainguard-dev/actions). Updates `step-security/harden-runner` from 2.22.1 to 2.22.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ccd8616d44fd3846e67624a50d5aad6d37bf2d25...dc2769abcc0fcfbadfc1df54081c1608579ef6b2) Updates `chainguard-dev/actions/setup-gitsign` from 1.6.41 to 1.6.42 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/3403a578b543fd3f0debdaef9dd989ae54e3fcef...53668650c25af6e8864f1d1ddaa69ed4db4cdf09) Updates `chainguard-dev/actions/gofmt` from 1.6.41 to 1.6.42 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/3403a578b543fd3f0debdaef9dd989ae54e3fcef...53668650c25af6e8864f1d1ddaa69ed4db4cdf09) Updates `chainguard-dev/actions/goimports` from 1.6.41 to 1.6.42 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/3403a578b543fd3f0debdaef9dd989ae54e3fcef...53668650c25af6e8864f1d1ddaa69ed4db4cdf09) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: chainguard-dev/actions/setup-gitsign dependency-version: 1.6.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: chainguard-dev/actions/gofmt dependency-version: 1.6.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: chainguard-dev/actions/goimports dependency-version: 1.6.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actionlint.yaml | 2 +- .github/workflows/codeql.yaml | 4 ++-- .github/workflows/digestabot.yaml | 4 ++-- .github/workflows/fuzz.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/style.yaml | 12 ++++++------ .github/workflows/third-party.yaml | 2 +- .github/workflows/update-yara-x.yaml | 6 +++--- .github/workflows/version.yaml | 4 ++-- .github/workflows/zizmor.yaml | 2 +- 11 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml index eba6647dc..9c0e7d068 100644 --- a/.github/workflows/actionlint.yaml +++ b/.github/workflows/actionlint.yaml @@ -24,7 +24,7 @@ jobs: name: Action lint runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index fa1381442..7461ec056 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -27,7 +27,7 @@ jobs: packages: read security-events: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -123,7 +123,7 @@ jobs: packages: read security-events: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/digestabot.yaml b/.github/workflows/digestabot.yaml index 16216faac..f44be1c7c 100644 --- a/.github/workflows/digestabot.yaml +++ b/.github/workflows/digestabot.yaml @@ -21,7 +21,7 @@ jobs: id-token: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -36,7 +36,7 @@ jobs: release-assets.githubusercontent.com:443 tuf-repo-cdn.sigstore.dev:443 - - uses: chainguard-dev/actions/setup-gitsign@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/setup-gitsign@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main - uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1 id: octo-sts diff --git a/.github/workflows/fuzz.yaml b/.github/workflows/fuzz.yaml index 5e5ef11f7..a82e13afc 100644 --- a/.github/workflows/fuzz.yaml +++ b/.github/workflows/fuzz.yaml @@ -46,7 +46,7 @@ jobs: targets: ${{ steps.find.outputs.targets }} steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 169f45d07..1e20cf846 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -19,7 +19,7 @@ jobs: id-token: write contents: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -29,7 +29,7 @@ jobs: github.com:443 octo-sts.dev:443 release-assets.githubusercontent.com:443 - - uses: chainguard-dev/actions/setup-gitsign@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/setup-gitsign@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main - name: Set up Octo-STS uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1 id: octo-sts diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 077c2abcd..ec5180944 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -36,7 +36,7 @@ jobs: steps: - name: Harden the runner (Audit all outbound calls) - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml index 43b4adfd2..60598739b 100644 --- a/.github/workflows/style.yaml +++ b/.github/workflows/style.yaml @@ -26,7 +26,7 @@ jobs: contents: read steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -63,7 +63,7 @@ jobs: contents: read steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -99,7 +99,7 @@ jobs: contents: read steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -126,7 +126,7 @@ jobs: go-version-file: go.mod check-latest: true - - uses: chainguard-dev/actions/gofmt@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/gofmt@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main with: args: -s @@ -137,7 +137,7 @@ jobs: contents: read steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -164,7 +164,7 @@ jobs: go-version-file: go.mod check-latest: true - - uses: chainguard-dev/actions/goimports@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/goimports@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main golangci-lint: name: golangci-lint diff --git a/.github/workflows/third-party.yaml b/.github/workflows/third-party.yaml index e0603a491..7d32110b5 100644 --- a/.github/workflows/third-party.yaml +++ b/.github/workflows/third-party.yaml @@ -42,7 +42,7 @@ jobs: run: | apk update apk add bash curl findutils gcc gh git gnutar "${GO_RELEASE}" make nodejs perl pkgconf upx xz "yara-x~${YARA_X_RELEASE}" - - uses: chainguard-dev/actions/setup-gitsign@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/setup-gitsign@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main - name: Set up Octo-STS uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1 id: octo-sts diff --git a/.github/workflows/update-yara-x.yaml b/.github/workflows/update-yara-x.yaml index 5feb77681..715ddf712 100644 --- a/.github/workflows/update-yara-x.yaml +++ b/.github/workflows/update-yara-x.yaml @@ -21,7 +21,7 @@ jobs: new_version: ${{ steps.check.outputs.new_version }} steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -92,7 +92,7 @@ jobs: pull-requests: write steps: - name: Harden Runner - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -112,7 +112,7 @@ jobs: sum.golang.org:443 tuf-repo-cdn.sigstore.dev:443 - - uses: chainguard-dev/actions/setup-gitsign@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/setup-gitsign@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main - name: Set up Octo-STS uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1 id: octo-sts diff --git a/.github/workflows/version.yaml b/.github/workflows/version.yaml index b78bf2a2c..310e76c78 100644 --- a/.github/workflows/version.yaml +++ b/.github/workflows/version.yaml @@ -26,7 +26,7 @@ jobs: id-token: write pull-requests: write steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: > @@ -39,7 +39,7 @@ jobs: rekor.sigstore.dev:443 release-assets.githubusercontent.com:443 tuf-repo-cdn.sigstore.dev:443 - - uses: chainguard-dev/actions/setup-gitsign@3403a578b543fd3f0debdaef9dd989ae54e3fcef # main + - uses: chainguard-dev/actions/setup-gitsign@53668650c25af6e8864f1d1ddaa69ed4db4cdf09 # main - name: Set up Octo-STS uses: octo-sts/action@f603d3be9d8dd9871a265776e625a27b00effe05 # v1.1.1 id: octo-sts diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index b45ea813d..aac5f02d4 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -30,7 +30,7 @@ jobs: contents: read # Clone the repository security-events: write # Upload SARIF results to Code Scanning steps: - - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 + - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 with: egress-policy: block allowed-endpoints: >