diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index ba6adf6..b505aa1 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -35,7 +35,7 @@ jobs: java-version: "17.0" distribution: "temurin" - name: Setup Gradle - uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 + uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0 - name: Build with Gradle run: ./gradlew build - name: Send status to Slack @@ -55,7 +55,7 @@ jobs: java-version: "17.0" distribution: "temurin" - name: Setup Gradle - uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 + uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0 - name: Run license scanner run: ./gradlew checkLicense - name: Send status to Slack @@ -78,7 +78,7 @@ jobs: java-version: "17.0" distribution: "temurin" - name: Setup Gradle - uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 + uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0 - name: Build container image run: ./gradlew bootBuildImage - name: Run Trivy vulnerability scanner @@ -138,7 +138,7 @@ jobs: path: ~/.sonar/cache key: ${{ runner.os }}-sonar - name: Setup Gradle - uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 + uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0 - name: Scan with SonarQube env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any @@ -181,7 +181,7 @@ jobs: java-version: "17.0" distribution: "temurin" - name: Setup Gradle - uses: gradle/actions/setup-gradle@417ae3ccd767c252f5661f1ace9f835f9654f2b5 # v3.1.0 + uses: gradle/actions/setup-gradle@e24011a3b5db78bd5ab798036042d9312002f252 # v3.2.0 - name: Build and publish container image run: CONTAINER_REGISTRY_USER=${{ github.actor }} CONTAINER_REGISTRY_PASSWORD=${{ secrets.GITHUB_TOKEN }} ./gradlew bootBuildImage --publishImage - name: Install cosign