Skip to content

chore(ci): move reusable workflows to Node 24 actions - #8

Merged
longhn0710 merged 1 commit into
masterfrom
hardening/node24-actions-20260923
Sep 23, 2026
Merged

longhn0710 merged 1 commit into
masterfrom
hardening/node24-actions-20260923

Conversation

@longhn0710

Copy link
Copy Markdown
Contributor

GitHub now warns that the remaining container workflow actions use the deprecated Node.js 20 runtime. This updates the reusable Node, Python, and Java workflows to immutable pins for action releases that run on Node.js 24, while preserving the existing build, scan, OCI artifact, and publish flow.

Updated actions:

  • actions/download-artifact v8.0.1
  • docker/login-action v4.6.0
  • docker/setup-buildx-action v4.4.1
  • docker/build-push-action v7.4.0
  • actions/setup-java v6.0.1

Validation:

  • resolved every version tag to the pinned commit SHA
  • verified each action's action.yml declares runs.using: node24
  • actionlint -shellcheck= -pyflakes= .github/workflows/*.yml
  • git diff --check

@longhn0710
longhn0710 merged commit fe26ac4 into master Sep 23, 2026
3 checks passed
@longhn0710
longhn0710 deleted the hardening/node24-actions-20260923 branch September 23, 2026 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant