diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c8ed4ce..a7b4d8b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,7 +11,7 @@ permissions: read-all jobs: build: - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/go-ci.yml@08214ced07c278eaed1c68fa459916e07f071553 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/go-ci.yml@v1 with: coverage-artifact-name: coverage-report go-version-file: go.mod diff --git a/.github/workflows/generate-and-scan-sbom.yml b/.github/workflows/generate-and-scan-sbom.yml index 025a0ec..39d893e 100644 --- a/.github/workflows/generate-and-scan-sbom.yml +++ b/.github/workflows/generate-and-scan-sbom.yml @@ -12,7 +12,7 @@ permissions: jobs: source-sbom: - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-source-sbom fail-on-vulnerabilities: true @@ -25,7 +25,7 @@ jobs: publish-interlynk: needs: source-sbom - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/publish-sbom-interlynk.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/publish-sbom-interlynk.yml@v1 with: artifact-name: ${{ needs.source-sbom.outputs.artifact-name }} environment: Development diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 309dd82..1ccdd98 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,7 +11,7 @@ permissions: read-all jobs: lint: - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/go-lint.yml@08214ced07c278eaed1c68fa459916e07f071553 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/go-lint.yml@v1 with: go-version-file: go.mod golangci-lint-version: v2.8.0 diff --git a/.github/workflows/rearm.yml b/.github/workflows/rearm.yml index c1d1cd5..c998af8 100644 --- a/.github/workflows/rearm.yml +++ b/.github/workflows/rearm.yml @@ -50,7 +50,7 @@ jobs: evidence: needs: version - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/rearm.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/rearm.yml@v1 with: artifact-name: rearm-signed-sbom component-id: ${{ vars.REARM_COMPONENT_ID }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 79993a9..e348157 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,7 +13,7 @@ permissions: jobs: source-sbom: - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-release-sbom fail-on-vulnerabilities: true @@ -26,7 +26,7 @@ jobs: release: needs: source-sbom - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/release-go.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/release-go.yml@v1 with: config: .goreleaser.yml evidence-artifact-name: ${{ needs.source-sbom.outputs.artifact-name }} @@ -37,7 +37,7 @@ jobs: publish-interlynk: needs: source-sbom - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/publish-sbom-interlynk.yml@f945c3d57f3129a0124baa29fc77a9706e4e4131 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/publish-sbom-interlynk.yml@v1 with: artifact-name: ${{ needs.source-sbom.outputs.artifact-name }} environment: Production diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index ed25274..817b76c 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -15,7 +15,7 @@ permissions: jobs: security: - uses: shiftleftcyber/supply-chain-workflows/.github/workflows/security-go.yml@d175f38df5c7934cadbc5a9024d21bce9ac55530 + uses: shiftleftcyber/supply-chain-workflows/.github/workflows/security-go.yml@v1 with: go-version-file: go.mod working-directory: .