From 35e5b29eebb093e72edcb2b13cc14e8d1b0de819 Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 11 Jul 2023 11:45:18 +0200 Subject: [PATCH 1/4] Updates crazy-max/ghaction-import-gpg action to v5 to avoid the use of `save-state` and `set-output` See https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/ Signed-off-by: Ilyes Ben Dlala --- .github/workflows/helm-docs.yaml | 2 +- .github/workflows/scb-bot.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/helm-docs.yaml b/.github/workflows/helm-docs.yaml index 99fbd1900e..7f1adb2108 100644 --- a/.github/workflows/helm-docs.yaml +++ b/.github/workflows/helm-docs.yaml @@ -19,7 +19,7 @@ jobs: token: ${{ secrets.PAT_WITH_ADMIN }} ## Placeholder for PAT with Admin Access. - name: Import GPG key - uses: crazy-max/ghaction-import-gpg@v3 + uses: crazy-max/ghaction-import-gpg@v5 with: gpg-private-key: ${{ secrets.GPG_COMMITS_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_COMMITS_PASSPHRASE }} diff --git a/.github/workflows/scb-bot.yaml b/.github/workflows/scb-bot.yaml index 5349eb5d6f..8f3ebccdc9 100644 --- a/.github/workflows/scb-bot.yaml +++ b/.github/workflows/scb-bot.yaml @@ -44,7 +44,7 @@ jobs: - uses: actions/checkout@v2 - name: Import GPG key - uses: crazy-max/ghaction-import-gpg@v3 + uses: crazy-max/ghaction-import-gpg@v5 with: gpg-private-key: ${{ secrets.GPG_COMMITS_PRIVATE_KEY }} passphrase: ${{ secrets.GPG_COMMITS_PASSPHRASE }} From 2ff194acc65134ccbc9e099a9763aa222ad758a0 Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 11 Jul 2023 11:46:28 +0200 Subject: [PATCH 2/4] Updates megalinter@v5 action to v7 to avoid the use of `save-state` and `set-output` See https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/ The naming scheme of the action has also changed from megalinter/megaliner@vX to oxsecurity/megalinter@vX Signed-off-by: Ilyes Ben Dlala --- .github/workflows/mega-linter.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml index f37d0bf96e..fcc4612d85 100644 --- a/.github/workflows/mega-linter.yml +++ b/.github/workflows/mega-linter.yml @@ -36,7 +36,7 @@ jobs: id: ml # You can override MegaLinter flavor used to have faster performances # More info at https://megalinter.github.io/flavors/ - uses: megalinter/megalinter@v5 + uses: oxsecurity/megalinter@v7 env: # All available variables are described in documentation # https://megalinter.github.io/configuration/ From 9d21d9c6ffdf00c892af870ec42331f7a4c8d485 Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 11 Jul 2023 14:05:16 +0200 Subject: [PATCH 3/4] Updated actions/checkout and actions/upload-artifcat from v2 to v3 Signed-off-by: Ilyes Ben Dlala --- .github/workflows/ci.yaml | 26 +++++++++++----------- .github/workflows/helm-charts-release.yaml | 2 +- .github/workflows/helm-docs.yaml | 2 +- .github/workflows/mega-linter.yml | 4 ++-- .github/workflows/release-build.yaml | 20 ++++++++--------- .github/workflows/scb-bot.yaml | 2 +- 6 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index be2f63019f..d04733e4b5 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -32,7 +32,7 @@ jobs: name: "Configuration" runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Install nvm and Node.js run: | @@ -46,7 +46,7 @@ jobs: tar czf nvm-node.tar.gz -C $HOME .nvm - name: Upload nvm and Node.js - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: nvm-node path: ./nvm-node.tar.gz @@ -63,7 +63,7 @@ jobs: matrix: unit: ["persistence-defectdojo"] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - uses: actions/setup-java@v1 with: java-version: "17" # The JDK version to make available on the path. @@ -85,7 +85,7 @@ jobs: component: ["operator", "lurker"] steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Go Setup uses: actions/setup-go@v2 @@ -107,7 +107,7 @@ jobs: run: make docker-export-${{ matrix.component }} - name: Upload Image As Artifact - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: ${{ matrix.component }}-image path: ./operator/${{ matrix.component }}.tar @@ -120,7 +120,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Go Setup uses: actions/setup-go@v2 @@ -146,7 +146,7 @@ jobs: run: make docker-export - name: Upload Image As Artifact - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: auto-discovery-image path: ./auto-discovery/kubernetes/auto-discovery-kubernetes.tar @@ -159,7 +159,7 @@ jobs: needs: nvm-setup steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Setup Python Version uses: actions/setup-python@v4 @@ -192,7 +192,7 @@ jobs: run: make docker-export - name: Upload Image As Artifact - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: auto-discovery-pull-secret-extractor path: ./auto-discovery/kubernetes/pull-secret-extractor/auto-discovery-secret-extractor.tar @@ -225,7 +225,7 @@ jobs: - hook-sdk steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Build Image working-directory: ./${{ matrix.sdk }}/nodejs @@ -236,7 +236,7 @@ jobs: run: make docker-export-sdk - name: Upload Artifact - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: ${{ matrix.sdk }}-image path: ./${{ matrix.sdk }}/nodejs/${{ matrix.sdk }}.tar @@ -279,7 +279,7 @@ jobs: - zap steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Download nvm and Node.js uses: actions/download-artifact@v2 @@ -411,7 +411,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Download nvm and Node.js uses: actions/download-artifact@v2 diff --git a/.github/workflows/helm-charts-release.yaml b/.github/workflows/helm-charts-release.yaml index 8473551ae3..81372d8bf9 100644 --- a/.github/workflows/helm-charts-release.yaml +++ b/.github/workflows/helm-charts-release.yaml @@ -11,7 +11,7 @@ jobs: name: Package and Publish runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: "Install yq" run: | sudo snap install yq diff --git a/.github/workflows/helm-docs.yaml b/.github/workflows/helm-docs.yaml index 7f1adb2108..bbb314d64c 100644 --- a/.github/workflows/helm-docs.yaml +++ b/.github/workflows/helm-docs.yaml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'secureCodeBox/secureCodeBox' steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 with: ref: ${{ github.head_ref }} token: ${{ secrets.PAT_WITH_ADMIN }} ## Placeholder for PAT with Admin Access. diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml index fcc4612d85..30b72a5a67 100644 --- a/.github/workflows/mega-linter.yml +++ b/.github/workflows/mega-linter.yml @@ -26,7 +26,7 @@ jobs: steps: # Git Checkout - name: Checkout Code - uses: actions/checkout@v2 + uses: actions/checkout@v3 with: token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} fetch-depth: 0 @@ -47,7 +47,7 @@ jobs: # Upload MegaLinter artifacts - name: Archive production artifacts if: ${{ success() }} || ${{ failure() }} - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: MegaLinter reports path: | diff --git a/.github/workflows/release-build.yaml b/.github/workflows/release-build.yaml index eb813cc0c4..cb449c58b3 100644 --- a/.github/workflows/release-build.yaml +++ b/.github/workflows/release-build.yaml @@ -32,7 +32,7 @@ jobs: component: ["operator", "lurker"] steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -79,7 +79,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -126,7 +126,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -179,7 +179,7 @@ jobs: - hook-sdk steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -231,7 +231,7 @@ jobs: - update-field-hook steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -285,7 +285,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -350,7 +350,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -428,7 +428,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Set ENV Var with Scanner Version uses: mikefarah/yq@v4.4.1 @@ -499,7 +499,7 @@ jobs: - zap-advanced steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Docker Meta id: docker_meta @@ -559,7 +559,7 @@ jobs: - old-wordpress steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@v3 - name: Set ENV Var with Demo-Target Version uses: mikefarah/yq@v4.4.1 diff --git a/.github/workflows/scb-bot.yaml b/.github/workflows/scb-bot.yaml index 8f3ebccdc9..3e7aa8cd74 100644 --- a/.github/workflows/scb-bot.yaml +++ b/.github/workflows/scb-bot.yaml @@ -41,7 +41,7 @@ jobs: - zap-advanced # missing scanners are : nmap, nikto steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Import GPG key uses: crazy-max/ghaction-import-gpg@v5 From d7d06ddc7853fc9d7696e1f5df970a6f2a41a3f9 Mon Sep 17 00:00:00 2001 From: Ilyes Ben Dlala Date: Tue, 11 Jul 2023 15:38:55 +0200 Subject: [PATCH 4/4] Updated the name of the megalinter report artifcat in v7 Signed-off-by: Ilyes Ben Dlala --- .github/workflows/mega-linter.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml index 30b72a5a67..ce5e28fa8d 100644 --- a/.github/workflows/mega-linter.yml +++ b/.github/workflows/mega-linter.yml @@ -51,5 +51,5 @@ jobs: with: name: MegaLinter reports path: | - report + megalinter-reports mega-linter.log