Compare commits

..
Author SHA1 Message Date
dependabot[bot]andGitHub 9738eb7760 chore(deps): bump actions/download-artifact from 5 to 7
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 17:02:25 +00:00
4 changed files with 17 additions and 67 deletions
+3 -3
View File
@@ -13,17 +13,17 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v7 uses: actions/checkout@v4
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Setup go - name: Setup go
uses: actions/setup-go@v7 uses: actions/setup-go@v6
with: with:
go-version: "^1" go-version: "^1"
- name: Run GoReleaser - name: Run GoReleaser
uses: goreleaser/goreleaser-action@v7 uses: goreleaser/goreleaser-action@v6
with: with:
# either 'goreleaser' (default) or 'goreleaser-pro' # either 'goreleaser' (default) or 'goreleaser-pro'
distribution: goreleaser distribution: goreleaser
+7 -7
View File
@@ -6,7 +6,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file via ssh password - name: copy file via ssh password
uses: appleboy/scp-action@v1 uses: appleboy/scp-action@v1
@@ -67,16 +67,16 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- run: echo hello > world.txt - run: echo hello > world.txt
- uses: actions/upload-artifact@v7 - uses: actions/upload-artifact@v4
with: with:
name: my-artifact name: my-artifact
path: world.txt path: world.txt
- uses: actions/download-artifact@v8 - uses: actions/download-artifact@v7
with: with:
name: my-artifact name: my-artifact
path: distfiles path: distfiles
@@ -96,7 +96,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: Get changed files - name: Get changed files
id: changed-files id: changed-files
@@ -120,7 +120,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file to server - name: copy file to server
uses: appleboy/scp-action@v1 uses: appleboy/scp-action@v1
@@ -137,7 +137,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file to server - name: copy file to server
uses: appleboy/scp-action@v1 uses: appleboy/scp-action@v1
+7 -7
View File
@@ -6,7 +6,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file via ssh password - name: copy file via ssh password
uses: ./ uses: ./
@@ -67,16 +67,16 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- run: echo hello > world.txt - run: echo hello > world.txt
- uses: actions/upload-artifact@v7 - uses: actions/upload-artifact@v4
with: with:
name: my-artifact name: my-artifact
path: world.txt path: world.txt
- uses: actions/download-artifact@v8 - uses: actions/download-artifact@v7
with: with:
name: my-artifact name: my-artifact
path: distfiles path: distfiles
@@ -96,7 +96,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: Get changed files - name: Get changed files
id: changed-files id: changed-files
@@ -120,7 +120,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file to server - name: copy file to server
uses: ./ uses: ./
@@ -137,7 +137,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: checkout - name: checkout
uses: actions/checkout@v7 uses: actions/checkout@v5
- name: copy file to server - name: copy file to server
uses: ./ uses: ./
-50
View File
@@ -1,50 +0,0 @@
name: Trivy Security Scan
on:
schedule:
# Run at 00:00 on day 1 of every 3rd month (January, April, July, October)
- cron: "0 0 1 */3 *"
workflow_dispatch: # Allow manual trigger
push:
branches:
- master
pull_request:
branches:
- master
permissions:
contents: read
security-events: write # For uploading results to GitHub Security tab
jobs:
trivy-scan:
name: Trivy Security Scan
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v7
- name: Run Trivy vulnerability scanner in repo mode
uses: aquasecurity/trivy-action@v0.36.0
with:
scan-type: "fs"
scan-ref: "."
format: "sarif"
output: "trivy-results.sarif"
severity: "CRITICAL,HIGH"
- name: Upload Trivy results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v4
if: always()
with:
sarif_file: "trivy-results.sarif"
- name: Run Trivy vulnerability scanner (table output)
uses: aquasecurity/trivy-action@v0.36.0
with:
scan-type: "fs"
scan-ref: "."
format: "table"
severity: "CRITICAL,HIGH"
exit-code: "1"