Merge pull request #58 from sigstore/dependabot/github_actions/action…

…s-a9bb80ae19 Bump actions/checkout from 4.2.0 to 4.2.1 in the actions group
sigstore · Oct 8, 2024 · 67b03c1 · 67b03c1
2 parents 050fc04 + 34a6005
commit 67b03c1
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/.github/workflows/ci-build.yaml b/.github/workflows/ci-build.yaml
@@ -13,7 +13,7 @@ jobs:
     if: github.repository == 'sigstore/sigstore-devops-tools'
 
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
 
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -22,7 +22,7 @@ jobs:
       id-token: write # federates with GCP
 
     steps:
-    - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+    - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
     - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         go-version: '1.22'

diff --git a/.github/workflows/terraform.yaml b/.github/workflows/terraform.yaml
@@ -17,7 +17,7 @@ jobs:
     if: github.repository == 'sigstore/sigstore-devops-tools'
 
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
       - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3.1.2
         with:
           terraform_version: 1.8