diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 86af02f..a79fc0a 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -41,7 +41,7 @@ jobs: image_tag: ${{ steps.determine-tag.outputs.tag }} steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Determine deployment environment id: determine-env @@ -80,7 +80,7 @@ jobs: url: https://staging.wifi-densepose.com steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up kubectl uses: azure/setup-kubectl@v3 @@ -126,7 +126,7 @@ jobs: url: https://wifi-densepose.com steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up kubectl uses: azure/setup-kubectl@v3 @@ -199,7 +199,7 @@ jobs: # kubectl scale rs -n wifi-densepose -l app=wifi-densepose,version!=green --replicas=0 - name: Upload deployment artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 with: name: production-deployment-${{ github.run_number }} path: | @@ -270,7 +270,7 @@ jobs: done - name: Update deployment status - uses: actions/github-script@v6 + uses: actions/github-script@v8 with: script: | const deployEnv = '${{ needs.pre-deployment.outputs.deploy_env }}'; @@ -321,7 +321,7 @@ jobs: - name: Create deployment issue on failure if: needs.deploy-production.result == 'failure' - uses: actions/github-script@v6 + uses: actions/github-script@v8 with: script: | github.rest.issues.create({ diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 84f39ad..25ae194 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,12 +20,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' @@ -54,7 +54,7 @@ jobs: continue-on-error: true - name: Upload security reports - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 if: always() with: name: security-reports @@ -95,10 +95,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} cache: 'pip' @@ -133,7 +133,7 @@ jobs: name: codecov-umbrella - name: Upload test results - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 if: always() with: name: test-results-${{ matrix.python-version }} @@ -150,10 +150,10 @@ jobs: if: github.event_name == 'push' && github.ref == 'refs/heads/main' steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' @@ -174,7 +174,7 @@ jobs: locust -f tests/performance/locustfile.py --headless --users 50 --spawn-rate 5 --run-time 60s --host http://localhost:8000 - name: Upload performance results - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 with: name: performance-results path: locust_report.html @@ -186,7 +186,7 @@ jobs: needs: [code-quality, test] steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 @@ -249,10 +249,10 @@ jobs: if: github.ref == 'refs/heads/main' steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 237c87b..4318f16 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -24,12 +24,12 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' @@ -86,10 +86,10 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' @@ -126,7 +126,7 @@ jobs: category: snyk - name: Upload vulnerability reports - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 if: always() with: name: vulnerability-reports @@ -147,7 +147,7 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 @@ -218,7 +218,7 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run Checkov IaC scan uses: bridgecrewio/checkov-action@master @@ -272,7 +272,7 @@ jobs: contents: read steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 @@ -303,10 +303,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ env.PYTHON_VERSION }} cache: 'pip' @@ -323,7 +323,7 @@ jobs: licensecheck --zero - name: Upload license report - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 with: name: license-report path: licenses.json @@ -334,7 +334,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Check security policy files run: | @@ -376,7 +376,7 @@ jobs: if: always() steps: - name: Download all artifacts - uses: actions/download-artifact@v3 + uses: actions/download-artifact@v7 - name: Generate security summary run: | @@ -394,7 +394,7 @@ jobs: echo "Generated on: $(date)" >> security-summary.md - name: Upload security summary - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@v6 with: name: security-summary path: security-summary.md @@ -416,7 +416,7 @@ jobs: - name: Create security issue on critical findings if: needs.sast.result == 'failure' || needs.dependency-scan.result == 'failure' - uses: actions/github-script@v6 + uses: actions/github-script@v8 with: script: | github.rest.issues.create({