diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 543267a..985b99e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,7 +39,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@305f6546310b9203e892c28c1484e82977f4f63d # v2 + uses: github/codeql-action/init@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -50,7 +50,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@305f6546310b9203e892c28c1484e82977f4f63d # v2 + uses: github/codeql-action/autobuild@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -64,4 +64,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@305f6546310b9203e892c28c1484e82977f4f63d # v2 + uses: github/codeql-action/analyze@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2 diff --git a/Dockerfile b/Dockerfile index ffaca83..a27dac4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,7 +29,7 @@ RUN apk add --update --no-cache ca-certificates ## docker build --no-cache --target gcloud -t vela-kubernetes:gcloud . ## ############################################################################# -FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:1d89cbf1ad313d542cdca1b44b6f27f3cb1f9d8f1c0c6fa817b5820c964974d8 as gcloud +FROM gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine@sha256:e04112f84ba88422f42479ab3201cbe52499f9a627651de8ab6269f2a0b6eb38 as gcloud RUN gcloud components install gke-gcloud-auth-plugin