Skip to content

Commit 8bebe5a

Browse files
EdwardAngertEdwardAngert
committed
Merge branch 'main' into dk/prebuilds-docs
2 parents 4b101f3 + 0a26eee commit 8bebe5a

16 files changed

+86
-87
lines changed

‎.github/workflows/ci.yaml

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
tailnet-integration: ${{ steps.filter.outputs.tailnet-integration }}
3535
steps:
3636
- name: Harden Runner
37-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
37+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
3838
with:
3939
egress-policy: audit
4040

@@ -155,7 +155,7 @@ jobs:
155155
runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
156156
steps:
157157
- name: Harden Runner
158-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
158+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
159159
with:
160160
egress-policy: audit
161161

@@ -227,7 +227,7 @@ jobs:
227227
if: always()
228228
steps:
229229
- name: Harden Runner
230-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
230+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
231231
with:
232232
egress-policy: audit
233233

@@ -282,7 +282,7 @@ jobs:
282282
timeout-minutes: 7
283283
steps:
284284
- name: Harden Runner
285-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
285+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
286286
with:
287287
egress-policy: audit
288288

@@ -326,7 +326,7 @@ jobs:
326326
- windows-2022
327327
steps:
328328
- name: Harden Runner
329-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
329+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
330330
with:
331331
egress-policy: audit
332332

@@ -397,7 +397,7 @@ jobs:
397397
- windows-2022
398398
steps:
399399
- name: Harden Runner
400-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
400+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
401401
with:
402402
egress-policy: audit
403403

@@ -453,7 +453,7 @@ jobs:
453453
- ubuntu-latest
454454
steps:
455455
- name: Harden Runner
456-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
456+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
457457
with:
458458
egress-policy: audit
459459

@@ -521,7 +521,7 @@ jobs:
521521
timeout-minutes: 25
522522
steps:
523523
- name: Harden Runner
524-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
524+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
525525
with:
526526
egress-policy: audit
527527

@@ -569,7 +569,7 @@ jobs:
569569
timeout-minutes: 25
570570
steps:
571571
- name: Harden Runner
572-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
572+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
573573
with:
574574
egress-policy: audit
575575

@@ -618,7 +618,7 @@ jobs:
618618
timeout-minutes: 25
619619
steps:
620620
- name: Harden Runner
621-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
621+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
622622
with:
623623
egress-policy: audit
624624

@@ -677,7 +677,7 @@ jobs:
677677
timeout-minutes: 20
678678
steps:
679679
- name: Harden Runner
680-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
680+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
681681
with:
682682
egress-policy: audit
683683

@@ -703,7 +703,7 @@ jobs:
703703
timeout-minutes: 20
704704
steps:
705705
- name: Harden Runner
706-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
706+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
707707
with:
708708
egress-policy: audit
709709

@@ -735,7 +735,7 @@ jobs:
735735
name: ${{ matrix.variant.name }}
736736
steps:
737737
- name: Harden Runner
738-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
738+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
739739
with:
740740
egress-policy: audit
741741

@@ -804,7 +804,7 @@ jobs:
804804
if: needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true'
805805
steps:
806806
- name: Harden Runner
807-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
807+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
808808
with:
809809
egress-policy: audit
810810

@@ -881,7 +881,7 @@ jobs:
881881

882882
steps:
883883
- name: Harden Runner
884-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
884+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
885885
with:
886886
egress-policy: audit
887887

@@ -950,7 +950,7 @@ jobs:
950950
if: always()
951951
steps:
952952
- name: Harden Runner
953-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
953+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
954954
with:
955955
egress-policy: audit
956956

@@ -1080,7 +1080,7 @@ jobs:
10801080
IMAGE: ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
10811081
steps:
10821082
- name: Harden Runner
1083-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1083+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
10841084
with:
10851085
egress-policy: audit
10861086

@@ -1137,7 +1137,7 @@ jobs:
11371137
# Setup GCloud for signing Windows binaries.
11381138
- name: Authenticate to Google Cloud
11391139
id: gcloud_auth
1140-
uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
1140+
uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
11411141
with:
11421142
workload_identity_provider: ${{ secrets.GCP_CODE_SIGNING_WORKLOAD_ID_PROVIDER }}
11431143
service_account: ${{ secrets.GCP_CODE_SIGNING_SERVICE_ACCOUNT }}
@@ -1147,7 +1147,7 @@ jobs:
11471147
uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a # v2.1.4
11481148

11491149
- name: Download dylibs
1150-
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
1150+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
11511151
with:
11521152
name: dylibs
11531153
path: ./build
@@ -1264,7 +1264,7 @@ jobs:
12641264
id: attest_main
12651265
if: github.ref == 'refs/heads/main'
12661266
continue-on-error: true
1267-
uses: actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1267+
uses: actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
12681268
with:
12691269
subject-name: "ghcr.io/coder/coder-preview:main"
12701270
predicate-type: "https://slsa.dev/provenance/v1"
@@ -1301,7 +1301,7 @@ jobs:
13011301
id: attest_latest
13021302
if: github.ref == 'refs/heads/main'
13031303
continue-on-error: true
1304-
uses: actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1304+
uses: actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
13051305
with:
13061306
subject-name: "ghcr.io/coder/coder-preview:latest"
13071307
predicate-type: "https://slsa.dev/provenance/v1"
@@ -1338,7 +1338,7 @@ jobs:
13381338
id: attest_version
13391339
if: github.ref == 'refs/heads/main'
13401340
continue-on-error: true
1341-
uses: actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31 # v2.2.1
1341+
uses: actions/attest@afd638254319277bb3d7f0a234478733e2e46a73 # v2.3.0
13421342
with:
13431343
subject-name: "ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}"
13441344
predicate-type: "https://slsa.dev/provenance/v1"
@@ -1426,7 +1426,7 @@ jobs:
14261426
id-token: write
14271427
steps:
14281428
- name: Harden Runner
1429-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1429+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
14301430
with:
14311431
egress-policy: audit
14321432

@@ -1436,7 +1436,7 @@ jobs:
14361436
fetch-depth: 0
14371437

14381438
- name: Authenticate to Google Cloud
1439-
uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
1439+
uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
14401440
with:
14411441
workload_identity_provider: projects/573722524737/locations/global/workloadIdentityPools/github/providers/github
14421442
service_account: coder-ci@coder-dogfood.iam.gserviceaccount.com
@@ -1490,7 +1490,7 @@ jobs:
14901490
if: github.ref == 'refs/heads/main' && !github.event.pull_request.head.repo.fork
14911491
steps:
14921492
- name: Harden Runner
1493-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1493+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
14941494
with:
14951495
egress-policy: audit
14961496

@@ -1525,7 +1525,7 @@ jobs:
15251525
if: needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
15261526
steps:
15271527
- name: Harden Runner
1528-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
1528+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
15291529
with:
15301530
egress-policy: audit
15311531

‎.github/workflows/docker-base.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
if: github.repository_owner == 'coder'
3939
steps:
4040
- name: Harden Runner
41-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
41+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
4242
with:
4343
egress-policy: audit
4444

‎.github/workflows/docs-ci.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- name: Setup Node
2929
uses: ./.github/actions/setup-node
3030

31-
- uses: tj-actions/changed-files@9934ab3fdf63239da75d9e0fbd339c48620c72c4 # v45.0.7
31+
- uses: tj-actions/changed-files@5426ecc3f5c2b10effaefbd374f0abdc6a571b2f # v45.0.7
3232
id: changed-files
3333
with:
3434
files: |

‎.github/workflows/dogfood.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-4' || 'ubuntu-latest' }}
2828
steps:
2929
- name: Harden Runner
30-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
30+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
3131
with:
3232
egress-policy: audit
3333

@@ -37,7 +37,7 @@ jobs:
3737
- name: Setup Nix
3838
uses: nixbuild/nix-quick-install-action@5bb6a3b3abe66fd09bbf250dce8ada94f856a703 # v30
3939

40-
- uses: nix-community/cache-nix-action@c448f065ba14308da81de769632ca67a3ce67cf5 # v6.1.2
40+
- uses: nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a # v6.1.3
4141
with:
4242
# restore and save a cache using this key
4343
primary-key: nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
@@ -114,7 +114,7 @@ jobs:
114114
runs-on: ubuntu-latest
115115
steps:
116116
- name: Harden Runner
117-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
117+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
118118
with:
119119
egress-policy: audit
120120

@@ -125,7 +125,7 @@ jobs:
125125
uses: ./.github/actions/setup-tf
126126

127127
- name: Authenticate to Google Cloud
128-
uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
128+
uses: google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193 # v2.1.10
129129
with:
130130
workload_identity_provider: projects/573722524737/locations/global/workloadIdentityPools/github/providers/github
131131
service_account: coder-ci@coder-dogfood.iam.gserviceaccount.com

‎.github/workflows/nightly-gauntlet.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
- windows-2022
2828
steps:
2929
- name: Harden Runner
30-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
30+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
3131
with:
3232
egress-policy: audit
3333

‎.github/workflows/pr-auto-assign.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: Harden Runner
17-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
17+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1818
with:
1919
egress-policy: audit
2020

‎.github/workflows/pr-cleanup.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
packages: write
2020
steps:
2121
- name: Harden Runner
22-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
22+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2323
with:
2424
egress-policy: audit
2525

‎.github/workflows/pr-deploy.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PR_OPEN: ${{ steps.check_pr.outputs.pr_open }}
4040
steps:
4141
- name: Harden Runner
42-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
42+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
4343
with:
4444
egress-policy: audit
4545

@@ -74,7 +74,7 @@ jobs:
7474
runs-on: "ubuntu-latest"
7575
steps:
7676
- name: Harden Runner
77-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
77+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
7878
with:
7979
egress-policy: audit
8080

@@ -174,7 +174,7 @@ jobs:
174174
pull-requests: write # needed for commenting on PRs
175175
steps:
176176
- name: Harden Runner
177-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
177+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
178178
with:
179179
egress-policy: audit
180180

@@ -218,7 +218,7 @@ jobs:
218218
CODER_IMAGE_TAG: ${{ needs.get_info.outputs.CODER_IMAGE_TAG }}
219219
steps:
220220
- name: Harden Runner
221-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
221+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
222222
with:
223223
egress-policy: audit
224224

@@ -276,7 +276,7 @@ jobs:
276276
PR_HOSTNAME: "pr${{ needs.get_info.outputs.PR_NUMBER }}.${{ secrets.PR_DEPLOYMENTS_DOMAIN }}"
277277
steps:
278278
- name: Harden Runner
279-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
279+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
280280
with:
281281
egress-policy: audit
282282

‎.github/workflows/release-validation.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
- name: Harden Runner
17-
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
17+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
1818
with:
1919
egress-policy: audit
2020

0 commit comments

Comments
 (0)