Merge pull request #287 from jvanz/main

jvanz · web-flow · commit 0f1672d63bd3 · 2026-04-07T11:03:00.000-03:00
build: Pin actions to commit of v4.6.5
diff --git a/.github/workflows/reusable-release-policy-assemblyscript.yml b/.github/workflows/reusable-release-policy-assemblyscript.yml
@@ -19,7 +19,7 @@ jobs:
       NODE_VERSION: 14
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -48,7 +48,7 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
       - name: Setup node
@@ -71,7 +71,7 @@ jobs:
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -88,4 +88,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/.github/workflows/reusable-release-policy-go-wasi.yml b/.github/workflows/reusable-release-policy-go-wasi.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -46,16 +46,16 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
       - name: Build and annotate policy
-        uses: kubewarden/github-actions/policy-build-go-wasi@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-go-wasi@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -71,4 +71,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/.github/workflows/reusable-release-policy-go.yml b/.github/workflows/reusable-release-policy-go.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -46,16 +46,16 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
       - name: Build and annotate policy
-        uses: kubewarden/github-actions/policy-build-tinygo@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-tinygo@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -71,4 +71,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/.github/workflows/reusable-release-policy-rego.yml b/.github/workflows/reusable-release-policy-rego.yml
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -64,12 +64,12 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
           policy-working-dir: ${{ inputs.policy-working-dir }}
       - name: Install opa
-        uses: kubewarden/github-actions/opa-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/opa-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Build policy
         working-directory: ${{ inputs.policy-working-dir }}
@@ -87,7 +87,7 @@ jobs:
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -105,6 +105,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           policy-working-dir: ${{ inputs.policy-working-dir }}
diff --git a/.github/workflows/reusable-release-policy-rust.yml b/.github/workflows/reusable-release-policy-rust.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -46,16 +46,16 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
       - name: Build and annotate policy
-        uses: kubewarden/github-actions/policy-build-rust@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-rust@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -71,4 +71,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/.github/workflows/reusable-release-policy-swift.yml b/.github/workflows/reusable-release-policy-swift.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           # until https://github.com/actions/checkout/pull/579 is released
@@ -46,7 +46,7 @@ jobs:
       - name: Check that `io.kubewarden.policy.version` annotation is up-to-date
         # skip when releasing :latest from main, versions will not match
         if: startsWith(github.ref, 'refs/tags/v')
-        uses: kubewarden/github-actions/check-policy-version@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/check-policy-version@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           expected-version: ${{ steps.calculate-version.outputs.version }}
       - name: install wasm-strip
@@ -72,7 +72,7 @@ jobs:
         run: |
           make e2e-tests
       - name: Release
-        uses: kubewarden/github-actions/policy-release@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-release@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           oci-target: ${{ inputs.oci-target }}
@@ -88,4 +88,4 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Push artifacthub files to artifacthub branch
-        uses: kubewarden/github-actions/push-artifacthub@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/push-artifacthub@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/.github/workflows/reusable-test-policy-go-wasi.yml b/.github/workflows/reusable-test-policy-go-wasi.yml
@@ -23,11 +23,11 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Build and annotate policy
         with:
           generate-sbom: false
-        uses: kubewarden/github-actions/policy-build-go-wasi@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-go-wasi@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: make e2e-tests
 
diff --git a/.github/workflows/reusable-test-policy-go.yml b/.github/workflows/reusable-test-policy-go.yml
@@ -23,11 +23,11 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Build and annotate policy
         with:
           generate-sbom: false
-        uses: kubewarden/github-actions/policy-build-tinygo@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-tinygo@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: make e2e-tests
 
diff --git a/.github/workflows/reusable-test-policy-rego.yml b/.github/workflows/reusable-test-policy-rego.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install opa
-        uses: kubewarden/github-actions/opa-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/opa-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run unit tests
         working-directory: ${{ inputs.policy-working-dir }}
         run: make test
diff --git a/.github/workflows/reusable-test-policy-rust.yml b/.github/workflows/reusable-test-policy-rust.yml
@@ -53,11 +53,11 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install dependencies
-        uses: kubewarden/github-actions/policy-gh-action-dependencies@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-gh-action-dependencies@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Build and annotate policy
         with:
           generate-sbom: false
-        uses: kubewarden/github-actions/policy-build-rust@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+        uses: kubewarden/github-actions/policy-build-rust@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
       - name: Run e2e tests
         run: |
           make e2e-tests
diff --git a/attestation/action.yml b/attestation/action.yml
@@ -18,7 +18,7 @@ runs:
     - name: Install cosign
       uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
     - name: Install the crane command
-      uses: kubewarden/github-actions/crane-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+      uses: kubewarden/github-actions/crane-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
     - name: Login to GitHub Container Registry
       uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
       with:
diff --git a/policy-gh-action-dependencies/action.yml b/policy-gh-action-dependencies/action.yml
@@ -9,11 +9,11 @@ runs:
     - name: Install cosign
       uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
     - name: Install kwctl
-      uses: kubewarden/github-actions/kwctl-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+      uses: kubewarden/github-actions/kwctl-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
     - name: Install bats
       run: sudo apt install -y bats
       shell: bash
     - name: Install SBOM generator tool
-      uses: kubewarden/github-actions/syft-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+      uses: kubewarden/github-actions/syft-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
     - name: Install binaryen tool
-      uses: kubewarden/github-actions/binaryen-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+      uses: kubewarden/github-actions/binaryen-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
diff --git a/push-artifacthub/action.yml b/push-artifacthub/action.yml
@@ -12,7 +12,7 @@ runs:
   using: "composite"
   steps:
     - name: Install kwctl
-      uses: kubewarden/github-actions/kwctl-installer@7bc76e326b9c29582dd89eaf1b9efad1da3d3872
+      uses: kubewarden/github-actions/kwctl-installer@f37a8ae3949573fb4dcce1ff774cf40770f6ff11
     - name: Checkout code
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
