PYTHON-5432 Use ECR instead of artifactory and update to v3 #84
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
blink1073
changed the title
| @@ -36,10 +36,10 @@ | |||
| export COMMIT_MESSAGE=$(echo "${{ inputs.commit_template }}" | envsubst) | |||
| echo "COMMIT_MESSAGE=$COMMIT_MESSAGE" >> $GITHUB_ENV | |||
| - name: Commit the version bump | |||
| uses: mongodb-labs/drivers-github-tools/git-sign@v2 | |||
| uses: mongodb-labs/drivers-github-tools/git-sign@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
|
|
||
| runs: | ||
| using: composite | ||
| steps: | ||
| - name: Generate Authorized Publication Report | ||
| uses: mongodb-labs/drivers-github-tools/authorized-pub@v2 | ||
| uses: mongodb-labs/drivers-github-tools/authorized-pub@PYTHON-5432 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| @@ -48,19 +45,19 @@ | |||
| - name: Generate SBOM File | |||
| # not all packages have third party dependencies, and so not all packages integrate with silk. | |||
| if: ${{ inputs.silk_asset_group }} || ${{ inputs.sbom_in_path }} | |||
| uses: mongodb-labs/drivers-github-tools/sbom@v2 | |||
| uses: mongodb-labs/drivers-github-tools/sbom@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
| with: | ||
| silk_asset_group: ${{ inputs.silk_asset_group }} | ||
| sbom_file_name: ${{ inputs.sbom_file_name }} | ||
| kondukto_sub_project: ${{ inputs.kondukto_sub_project }} | ||
| sbom_in_path: ${{ inputs.sbom_in_path }} | ||
| - name: Generate Sarif File | ||
| uses: mongodb-labs/drivers-github-tools/code-scanning-export@v2 | ||
| uses: mongodb-labs/drivers-github-tools/code-scanning-export@PYTHON-5432 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| with: | ||
| ref: ${{ inputs.sarif_report_target_ref || inputs.release_version }} | ||
| output-file: ${{ env.S3_ASSETS }}/code-scanning-alerts.json | ||
| - name: Generate Compliance Report | ||
| uses: mongodb-labs/drivers-github-tools/compliance-report@v2 | ||
| uses: mongodb-labs/drivers-github-tools/compliance-report@PYTHON-5432 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| @@ -90,7 +86,7 @@ | |||
| evergreen_project: ${{ inputs.evergreen_project }} | |||
| evergreen_commit: ${{ steps.evergreen-commit.outputs.commit }} | |||
| token: ${{ inputs.token }} | |||
| - uses: mongodb-labs/drivers-github-tools/upload-s3-assets@v2 | |||
| - uses: mongodb-labs/drivers-github-tools/upload-s3-assets@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
| @@ -121,7 +117,7 @@ | |||
| git clean -dffx | |||
| git pull origin ${GITHUB_REF} | |||
| - name: Set following version | |||
| uses: mongodb-labs/drivers-github-tools/bump-version@v2 | |||
| uses: mongodb-labs/drivers-github-tools/bump-version@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
| @@ -63,15 +63,15 @@ | |||
| echo "VERSION=$VERSION" >> $GITHUB_ENV | |||
| fi | |||
| - name: Set version | |||
| uses: mongodb-labs/drivers-github-tools/bump-version@v2 | |||
| uses: mongodb-labs/drivers-github-tools/bump-version@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
| if: ${{ inputs.version }} | ||
| with: | ||
| version: ${{ env.VERSION }} | ||
| version_bump_script: ${{ inputs.version_bump_script }} | ||
| working_directory: ${{ inputs.working_directory }} | ||
| push_commit: ${{ env.PUSH_CHANGES }} | ||
| - name: Tag version | ||
| uses: mongodb-labs/drivers-github-tools/tag-version@v2 | ||
| uses: mongodb-labs/drivers-github-tools/tag-version@PYTHON-5432 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| @@ -33,10 +33,10 @@ | |||
| export TAG_MESSAGE=$(echo "${{ inputs.tag_message_template }}" | envsubst) | |||
| echo "TAG_MESSAGE=$TAG_MESSAGE" >> $GITHUB_ENV | |||
| - name: Tag the version | |||
| uses: mongodb-labs/drivers-github-tools/git-sign@v2 | |||
| uses: mongodb-labs/drivers-github-tools/git-sign@PYTHON-5432 | |||
Check failure
Code scanning / zizmor
unpinned action reference Error
No description provided.