Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/assign-labels.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
name: Assign labels in Pull Request
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Execute assign labels
uses: mauroalderete/action-assign-labels@v1
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/check-x-crypto-deps.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
name: Check x/crypto Dependencies in Pull Request
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
ref: ${{ github.event.pull_request.head.ref }}
repository: ${{ github.event.pull_request.head.repo.full_name }}
Expand All @@ -26,7 +26,7 @@
${{ github.event.pull_request.base.ref }}:${{ github.event.pull_request.base.ref }}

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/config-change.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
helm_changes: ${{ steps.filter.outputs.helm }}
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Filter changes
uses: dorny/paths-filter@v3
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/k8s-bm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
changes: ${{ steps.filter.outputs.changes }}
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: filter changes
uses: dorny/paths-filter@v3
Expand All @@ -36,13 +36,13 @@
# NOTE: In case of self-hosted runners, tools like docker, make, kubectl etc. are installed at the time of setting up the runner.
# Hence, we don't need to install them as part of the job.
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand Down
30 changes: 15 additions & 15 deletions .github/workflows/pr-checks.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
changes: ${{ steps.filter.outputs.changes }}
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: filter changes
uses: dorny/paths-filter@v3
Expand All @@ -31,10 +31,10 @@
runs-on: ubuntu-latest
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod

Expand All @@ -48,10 +48,10 @@
runs-on: ubuntu-latest
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand All @@ -69,10 +69,10 @@
runs-on: ubuntu-latest
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand All @@ -85,10 +85,10 @@
runs-on: ubuntu-latest
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand Down Expand Up @@ -117,7 +117,7 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Setup Python
uses: actions/setup-python@v6
Expand All @@ -134,7 +134,7 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
fetch-depth: 0 # Fetch all the history of PR commits

Expand All @@ -151,10 +151,10 @@
runs-on: ubuntu-latest
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: setup go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand All @@ -168,7 +168,7 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Build and Deploy Kepler on K8s
uses: ./.github/k8s
Expand All @@ -177,7 +177,7 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Build and Deploy Kepler using Docker Compose
uses: ./.github/compose
10 changes: 5 additions & 5 deletions .github/workflows/profiling.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@
changes: ${{ steps.filter.outputs.changes }}
steps:
- name: checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: filter changes
uses: dorny/paths-filter@v3
Expand All @@ -34,12 +34,12 @@
# NOTE: In case of self-hosted runners, tools like docker, make, kubectl etc. are installed at the time of setting up the runner.
# Hence, we don't need to install them as part of the job.
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
fetch-depth: 0

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand Down Expand Up @@ -127,10 +127,10 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: false
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/push.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,10 @@
runs-on: ubuntu-latest
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: true
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,15 +15,15 @@
IMG_BASE: quay.io/sustainable_computing_io
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
# NOTE: setting fetch-depth to 0 to retrieve the entire history
# instead of a shallow -clone so that all tags are fetched as well.
# This is necessary for computing the VERSION using `git describe`
fetch-depth: 0

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod
cache: true
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@

steps:
- name: Checkout code
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
persist-credentials: false

Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/test-and-codecov.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -18,10 +18,10 @@
contents: read
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Setup Go
uses: actions/setup-go@v6.0.0
uses: actions/setup-go@v6.1.0

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
with:
go-version-file: go.mod

Expand All @@ -42,7 +42,7 @@
contents: read
steps:
- name: Checkout source
uses: actions/checkout@v5
uses: actions/checkout@v6

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 0: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Download coverage report artifact
uses: actions/download-artifact@v6
Expand Down
Loading