diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml index 45dfe0184..2acebb882 100644 --- a/.github/workflows/create-release.yml +++ b/.github/workflows/create-release.yml @@ -1,5 +1,6 @@ # Github Action to create a release with goreleaser name: Create Release + on: workflow_dispatch: push: @@ -11,18 +12,17 @@ jobs: goreleaser: runs-on: ubuntu-latest steps: - - - name: Checkout - uses: actions/checkout@v3 + - name: Checkout + uses: actions/checkout@v4 with: fetch-depth: 0 ssh-key: "${{ secrets.RELEASE_KEY }}" - - - name: Set up Go - uses: actions/setup-go@v3 - - - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v4 + + - name: Set up Go + uses: actions/setup-go@v5 + + - name: Run GoReleaser + uses: goreleaser/goreleaser-action@v5 with: distribution: goreleaser version: latest diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml index 3490a48ce..034510415 100644 --- a/.github/workflows/deps.yml +++ b/.github/workflows/deps.yml @@ -1,28 +1,30 @@ name: "Dependency Review" -on: [push, pull_request, workflow_dispatch] + +on: [pull_request, workflow_dispatch] + permissions: contents: read + jobs: dependency-review: runs-on: ubuntu-latest steps: - - name: "Checkout Repository" + - name: Checkout uses: actions/checkout@v4 - with: - show-progress: false - - name: "Dependency Review" - uses: actions/dependency-review-action@v3 - with: - vulnerability-check: false + + - name: Dependency review + uses: actions/dependency-review-action@v4 + govulncheck: runs-on: ubuntu-latest steps: - - name: "Checkout Repository" + - name: Checkout uses: actions/checkout@v4 - with: - show-progress: false + - id: govulncheck uses: golang/govulncheck-action@v1 with: - go-version-input: 1.22.2 go-version-file: go.mod + + # [Info] Shows version of go that is (was) used + - run: go version diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml index d9568044e..23b324baa 100644 --- a/.github/workflows/tag-release.yml +++ b/.github/workflows/tag-release.yml @@ -10,17 +10,20 @@ on: jobs: tag-release: if: ${{ github.repository == 'kubernetes-sigs/aws-iam-authenticator' }} - runs-on: ubuntu-20.04 + runs-on: ubuntu-latest permissions: contents: write steps: - - uses: actions/checkout@v3 + - name: Checkout + uses: actions/checkout@v4 with: fetch-depth: 0 ssh-key: "${{ secrets.RELEASE_KEY }}" - - run: /usr/bin/git config --global user.email actions@github.com - - run: /usr/bin/git config --global user.name 'GitHub Actions Release Tagger' - - run: hack/tag-release.sh + - name: Tag release + run: | + /usr/bin/git config --global user.email actions@github.com + /usr/bin/git config --global user.name 'GitHub Actions Release Tagger' + hack/tag-release.sh