From 0f35d3e8fd7a041ae50344f0c3829ed26c38ad24 Mon Sep 17 00:00:00 2001 From: Shane da Silva Date: Sat, 26 Sep 2026 00:41:46 -0700 Subject: [PATCH] chore: update gh-actions pins to ee2960a6 --- .github/workflows/benchmark-release.yml | 10 +++++----- .github/workflows/benchmark-request.yml | 4 ++-- .github/workflows/benchmark-run.yml | 6 +++--- .github/workflows/ci.yml | 10 +++++----- .github/workflows/dependency-scan.yml | 2 +- .github/workflows/docs.yml | 6 +++--- .github/workflows/scan-github-actions.yml | 2 +- .github/workflows/terraform-cd.yml | 6 +++--- 8 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/benchmark-release.yml b/.github/workflows/benchmark-release.yml index 8206dda..1754296 100644 --- a/.github/workflows/benchmark-release.yml +++ b/.github/workflows/benchmark-release.yml @@ -42,7 +42,7 @@ jobs: SCFUZZBENCH_BUCKET: ${{ secrets.SCFUZZBENCH_BUCKET }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Ensure AWS credentials are configured run: | if [ -z "${{ secrets.AWS_ACCESS_KEY_ID }}" ] || [ -z "${{ secrets.AWS_SECRET_ACCESS_KEY }}" ]; then @@ -59,7 +59,7 @@ jobs: fi - name: Configure AWS credentials (keys) - uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -188,7 +188,7 @@ jobs: SCFUZZBENCH_BUCKET: ${{ secrets.SCFUZZBENCH_BUCKET }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -205,7 +205,7 @@ jobs: rm -rf "${topdir}" repo.tar.gz - name: Configure AWS credentials (keys) - uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -561,7 +561,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Trigger docs refresh env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/benchmark-request.yml b/.github/workflows/benchmark-request.yml index d039780..c38969e 100644 --- a/.github/workflows/benchmark-request.yml +++ b/.github/workflows/benchmark-request.yml @@ -38,7 +38,7 @@ jobs: fuzzer_env_json: ${{ steps.prepare.outputs.fuzzer_env_json }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Parse and validate benchmark request id: prepare uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 @@ -490,7 +490,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Comment result (and close on success) uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 with: diff --git a/.github/workflows/benchmark-run.yml b/.github/workflows/benchmark-run.yml index 64553ce..fee3668 100644 --- a/.github/workflows/benchmark-run.yml +++ b/.github/workflows/benchmark-run.yml @@ -196,7 +196,7 @@ jobs: SCFUZZBENCH_BUCKET: ${{ secrets.SCFUZZBENCH_BUCKET }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -214,7 +214,7 @@ jobs: - name: Setup Terraform if: ${{ !inputs.dry_run }} - uses: tempoxyz/gh-actions/actions/setup-terraform@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/setup-terraform@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: version: 1.5.7 @@ -236,7 +236,7 @@ jobs: - name: Configure AWS credentials (keys) if: ${{ !inputs.dry_run }} - uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 39407af..bcbb79d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -52,7 +52,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -69,7 +69,7 @@ jobs: rm -rf "${topdir}" repo.tar.gz - name: Setup Terraform - uses: tempoxyz/gh-actions/actions/setup-terraform@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/setup-terraform@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: version: 1.5.7 @@ -89,7 +89,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -120,7 +120,7 @@ jobs: id-token: write steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml index b27543a..d0ad52b 100644 --- a/.github/workflows/dependency-scan.yml +++ b/.github/workflows/dependency-scan.yml @@ -7,7 +7,7 @@ permissions: {} jobs: dependency-scan: - uses: tempoxyz/gh-actions/.github/workflows/dependency-scan.yml@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/.github/workflows/dependency-scan.yml@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 permissions: contents: read id-token: write diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c839ed7..716d917 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -26,7 +26,7 @@ jobs: ZERION_API_KEY: ${{ secrets.ZERION_API_KEY }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -55,7 +55,7 @@ jobs: fi - name: Configure AWS credentials (keys) - uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -106,6 +106,6 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - id: deployment uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 diff --git a/.github/workflows/scan-github-actions.yml b/.github/workflows/scan-github-actions.yml index d0a3ddd..8063f17 100644 --- a/.github/workflows/scan-github-actions.yml +++ b/.github/workflows/scan-github-actions.yml @@ -8,7 +8,7 @@ permissions: {} jobs: scan: name: Scan GitHub Actions - uses: tempoxyz/gh-actions/.github/workflows/scan-github-actions.yml@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/.github/workflows/scan-github-actions.yml@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 permissions: actions: read contents: read diff --git a/.github/workflows/terraform-cd.yml b/.github/workflows/terraform-cd.yml index dabc1ec..167d915 100644 --- a/.github/workflows/terraform-cd.yml +++ b/.github/workflows/terraform-cd.yml @@ -34,7 +34,7 @@ jobs: AWS_REGION: ${{ secrets.AWS_REGION != '' && secrets.AWS_REGION || 'us-east-1' }} steps: - name: Secure runner - uses: tempoxyz/gh-actions/actions/secure-runner@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/secure-runner@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 - name: Checkout (tarball) timeout-minutes: 5 env: @@ -51,7 +51,7 @@ jobs: rm -rf "${topdir}" repo.tar.gz - name: Setup Terraform - uses: tempoxyz/gh-actions/actions/setup-terraform@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/actions/setup-terraform@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: version: 1.5.7 @@ -63,7 +63,7 @@ jobs: fi - name: Configure AWS credentials (keys) - uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@bd66336ead0e97e3939428f526dc61fb43db0996 # 2026-09-25T20-13-44Z-bd66336e + uses: tempoxyz/gh-actions/vendor/aws-actions/configure-aws-credentials@ee2960a6cc25d99bda45614135bfe1197d879bac # 2026-09-26T06-46-03Z-ee2960a6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}