Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/af01-assurance-proof.yml
Original file line number Diff line number Diff line change
Expand Up @@ -221,7 +221,7 @@ jobs:
git status --porcelain=v1 --untracked-files=all | tee /tmp/af01-source-status.txt
test ! -s /tmp/af01-source-status.txt
- name: Retain AF-01 assurance proof
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-assurance-proof
path: |
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/af01-scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,7 @@ jobs:
raise SystemExit(f"unexpected repository identity: {remote.get('repo')!r}")
PY
- name: Retain per-check Scorecard evidence
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-scorecard
path: |
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/af01-security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
< /tmp/commandf-dependency-metadata.json \
| tee af01-t020-dependency-inventory.json
- name: Upload exact dependency inventory
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-t020-dependency-inventory
path: af01-t020-dependency-inventory.json
Expand Down Expand Up @@ -84,7 +84,7 @@ jobs:
command-arguments: advisories bans licenses sources
log-level: warn
- name: Upload cargo-deny proof identity
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-cargo-deny-proof
path: af01-cargo-deny-proof.json
Expand Down Expand Up @@ -150,7 +150,7 @@ jobs:
PY
- name: Upload cargo-audit evidence
if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-rustsec-audit
path: |
Expand Down Expand Up @@ -221,7 +221,7 @@ jobs:
fail-on-no-inputs: true
- name: Upload zizmor policy identity
if: always()
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: af01-zizmor-proof
path: af01-zizmor-proof.json
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cf11-multi-version-proof.yml
Original file line number Diff line number Diff line change
Expand Up @@ -177,7 +177,7 @@ jobs:
run: test -z "$(git status --porcelain)"

- name: Upload foundation evidence
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: cf11-multi-version-proof
path: /tmp/cf11-multiversion/evidence.json
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cf11g-context-proof.yml
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ jobs:
test -z "$status"

- name: Upload context determinism evidence
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: cf11g-context-proof
path: /tmp/cf11g-context.sha256
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cf12-impact-proof.yml
Original file line number Diff line number Diff line change
Expand Up @@ -62,7 +62,7 @@ jobs:
test -z "$status"

- name: Upload impact determinism evidence
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
with:
name: cf12-impact-proof
path: /tmp/cf12-impact.sha256
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cf13-quality-gate-proof.yml
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,7 @@ jobs:
test -z "$status"

- name: Upload CF-13 deterministic evidence
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
with:
name: cf13-quality-gate-proof
path: /tmp/cf13-quality-gate-proof.env
Expand Down