3636 node-version : ' 24.14'
3737
3838 - name : Cache NPM dir
39- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
39+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4040 with :
4141 path : ~/.npm
4242 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
5757 run : npm run make-sbom
5858
5959 - name : Save SBOM artifact
60- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
60+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6161 with :
6262 name : sboms-server
6363 path : ' ./td.server/sbom.*'
8080 node-version : ' 24.14'
8181
8282 - name : Cache NPM dir
83- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
83+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
8484 with :
8585 path : ~/.npm
8686 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -114,7 +114,7 @@ jobs:
114114 node-version : ' 24.14'
115115
116116 - name : Cache NPM dir
117- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
117+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
118118 with :
119119 path : ~/.npm
120120 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -151,7 +151,7 @@ jobs:
151151 install : true
152152
153153 - name : Cache Docker layers
154- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
154+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
155155 with :
156156 path : /tmp/.buildx-cache
157157 key : ${{ runner.os }}-buildx-${{ hashFiles('Dockerfile') }}
@@ -160,15 +160,15 @@ jobs:
160160 ${{ runner.os }}-
161161
162162 - name : Login to Docker Hub
163- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
163+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
164164 with :
165165 username : ${{ secrets.DOCKERHUB_USERNAME }}
166166 password : ${{ secrets.DOCKERHUB_TOKEN }}
167167
168168 # platform manifests not (yet) supported, so split out architectures
169169 - name : Build for amd64 and push latest
170170 id : docker_build_amd64
171- uses : docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0 .0
171+ uses : docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1 .0
172172 with :
173173 context : ./
174174 file : ./Dockerfile
@@ -182,7 +182,7 @@ jobs:
182182
183183 - name : Build for arm64 and push latest-arm64
184184 id : docker_build_arm64
185- uses : docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0 .0
185+ uses : docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1 .0
186186 with :
187187 context : ./
188188 file : ./Dockerfile
@@ -200,7 +200,7 @@ jobs:
200200 IMAGE_ID : ${{ steps.docker_build_amd64.outputs.imageid }}
201201
202202 - name : Save SBOM artifact
203- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
203+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
204204 with :
205205 name : sboms-container-image-app
206206 path : ' ./boms/*'
@@ -221,7 +221,7 @@ jobs:
221221
222222 steps :
223223 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
224- - uses : akhileshns/heroku-deploy@e3eb99d45a8e2ec5dca08735e089607befa4bf28 # v3.14 .15
224+ - uses : akhileshns/heroku-deploy@1b080913896a5d6d44a18e9e208f8eb1fee9b0f7 # v3.15 .15
225225 with :
226226 heroku_api_key : ${{ secrets.HEROKU_API_KEY }}
227227 heroku_app_name : ${{ env.HEROKU_APP }}
@@ -248,7 +248,7 @@ jobs:
248248 node-version : ' 24.14'
249249
250250 - name : Cache NPM dir
251- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
251+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
252252 with :
253253 path : ~/.npm
254254 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -286,7 +286,7 @@ jobs:
286286 node-version : ' 24.14'
287287
288288 - name : Cache NPM dir
289- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
289+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
290290 with :
291291 path : ~/.npm
292292 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -305,7 +305,7 @@ jobs:
305305 run : xvfb-run -a npm run test:e2e:desktop
306306
307307 - name : Upload desktop e2e logs
308- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
308+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
309309 with :
310310 name : desktop-e2e-logs
311311 path : td.vue/wdio-logs
@@ -343,7 +343,7 @@ jobs:
343343 node-version : ' 24.14'
344344
345345 - name : Cache NPM dir
346- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
346+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
347347 with :
348348 path : ~/.npm
349349 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -358,7 +358,7 @@ jobs:
358358 run : npm run test:e2e-ci-smokes
359359
360360 - name : Upload e2e videos
361- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
361+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
362362 with :
363363 name : e2e_vids.zip
364364 path : td.vue/tests/e2e/videos
@@ -395,7 +395,7 @@ jobs:
395395 node-version : ' 24.14'
396396
397397 - name : Cache NPM dir
398- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
398+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
399399 with :
400400 path : ~/.npm
401401 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -410,7 +410,7 @@ jobs:
410410 run : npm run test:e2e-ci
411411
412412 - name : Upload e2e videos
413- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
413+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
414414 with :
415415 name : e2e_vids.zip
416416 path : td.vue/tests/e2e/videos
@@ -493,7 +493,7 @@ jobs:
493493 node-version : ' 24.14'
494494
495495 - name : Cache NPM dir
496- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
496+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
497497 with :
498498 path : ~/.npm
499499 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -508,7 +508,7 @@ jobs:
508508 run : npm run build:desktop -- --windows --publish never
509509
510510 - name : Save SBOM artifact
511- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
511+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
512512 with :
513513 name : sboms-desktop-windows-site
514514 path : ' ./td.vue/dist-desktop/bundled/.sbom/*'
@@ -533,7 +533,7 @@ jobs:
533533 node-version : ' 24.14'
534534
535535 - name : Cache NPM dir
536- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
536+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
537537 with :
538538 path : ~/.npm
539539 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -550,7 +550,7 @@ jobs:
550550 run : npm run build:desktop -- --mac --publish never
551551
552552 - name : Save SBOM artifact
553- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
553+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
554554 with :
555555 name : sboms-desktop-macos-site
556556 path : ' ./td.vue/dist-desktop/bundled/.sbom/*'
@@ -575,7 +575,7 @@ jobs:
575575 node-version : ' 24.14'
576576
577577 - name : Cache NPM dir
578- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
578+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
579579 with :
580580 path : ~/.npm
581581 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -597,7 +597,7 @@ jobs:
597597 run : find . -name "*.log" -exec cat '{}' \; -print
598598
599599 - name : Save SBOM artifact
600- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
600+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
601601 with :
602602 name : sboms-desktop-linux-site
603603 path : ' ./td.vue/dist-desktop/bundled/.sbom/*'
@@ -622,7 +622,7 @@ jobs:
622622 node-version : ' 24.14'
623623
624624 - name : Cache NPM dir
625- uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
625+ uses : actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
626626 with :
627627 path : ~/.npm
628628 key : ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
@@ -644,7 +644,7 @@ jobs:
644644 run : find . -name "*.log" -exec cat '{}' \; -print
645645
646646 - name : Save SBOM artifact
647- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
647+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
648648 with :
649649 name : sboms-desktop-linux-snap-site
650650 path : ' ./td.vue/dist-desktop/bundled/.sbom/*'
@@ -684,7 +684,7 @@ jobs:
684684 cp raw/sboms-desktop-linux-snap-site/bom.xml sboms/threat-dragon-desktop-linux-snap-site-bom.xml
685685 cp raw/sboms-container-image-app/* sboms/threat-dragon-container-image/app/
686686 - name : Save SBOM artifact
687- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
687+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
688688 with :
689689 name : sboms
690690 path : ' sboms/'
0 commit comments