From 0a6d84a272c6a1903b6473e004badea02d88722a Mon Sep 17 00:00:00 2001 From: Long Ho Date: Wed, 23 Sep 2026 07:21:30 +0700 Subject: [PATCH] chore(ci): move reusable workflows to Node 24 actions --- .github/workflows/java-container.yml | 12 ++++++------ .github/workflows/node-container.yml | 10 +++++----- .github/workflows/python-container.yml | 10 +++++----- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/java-container.yml b/.github/workflows/java-container.yml index be7135f..1a7b9ed 100644 --- a/.github/workflows/java-container.yml +++ b/.github/workflows/java-container.yml @@ -47,7 +47,7 @@ jobs: persist-credentials: false - name: Set up Java - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: distribution: temurin java-version: ${{ inputs.java_version }} @@ -65,9 +65,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build image for scanning - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: ${{ inputs.dockerfile }} @@ -111,7 +111,7 @@ jobs: persist-credentials: false - name: Download the scanned OCI image - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: scanned-image-java-${{ github.run_id }}-${{ github.run_attempt }} path: /tmp/scanned-image @@ -131,7 +131,7 @@ jobs: - name: Log in to container registry if: ${{ inputs.publish_image && inputs.registry == 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ github.actor }} @@ -139,7 +139,7 @@ jobs: - name: Log in to external container registry if: ${{ inputs.publish_image && inputs.registry != '' && inputs.registry != 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ secrets.registry_username }} diff --git a/.github/workflows/node-container.yml b/.github/workflows/node-container.yml index 000d6b5..1b40f1a 100644 --- a/.github/workflows/node-container.yml +++ b/.github/workflows/node-container.yml @@ -93,9 +93,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build image for scanning - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: ${{ inputs.docker_context }} file: ${{ inputs.dockerfile }} @@ -139,7 +139,7 @@ jobs: persist-credentials: false - name: Download the scanned OCI image - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: scanned-image-node-${{ github.run_id }}-${{ github.run_attempt }} path: /tmp/scanned-image @@ -159,7 +159,7 @@ jobs: - name: Log in to container registry if: ${{ inputs.publish_image && inputs.registry == 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ github.actor }} @@ -167,7 +167,7 @@ jobs: - name: Log in to external container registry if: ${{ inputs.publish_image && inputs.registry != '' && inputs.registry != 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ secrets.registry_username }} diff --git a/.github/workflows/python-container.yml b/.github/workflows/python-container.yml index a0613ff..9bc4544 100644 --- a/.github/workflows/python-container.yml +++ b/.github/workflows/python-container.yml @@ -70,9 +70,9 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Build image for scanning - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: ${{ inputs.dockerfile }} @@ -116,7 +116,7 @@ jobs: persist-credentials: false - name: Download the scanned OCI image - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: scanned-image-python-${{ github.run_id }}-${{ github.run_attempt }} path: /tmp/scanned-image @@ -136,7 +136,7 @@ jobs: - name: Log in to container registry if: ${{ inputs.publish_image && inputs.registry == 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ github.actor }} @@ -144,7 +144,7 @@ jobs: - name: Log in to external container registry if: ${{ inputs.publish_image && inputs.registry != '' && inputs.registry != 'ghcr.io' && github.event_name != 'pull_request' }} - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ inputs.registry }} username: ${{ secrets.registry_username }}