Merge pull request #1778 from torredil/update-ci-actions

Update GitHub workflows

.github/workflows/generate-code-coverage.yaml

@@ -7,14 +7,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout base
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.pull_request.base.ref }}
 
-      - name: Set up go
+      - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: '^1.20.2'
+          go-version-file: 'go.mod'
 
       - name: Generate report
         run: |
@@ -32,12 +32,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout PR
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
-      - name: Set up go
+      - name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: '^1.20.2'
+          go-version-file: 'go.mod'
 
       - name: Generate report
         run: |

.github/workflows/helm-chart-release.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Configure Git

.github/workflows/output-code-coverage.yaml

@@ -32,7 +32,7 @@ jobs:
             }
 
       - name: 'Determine source PR'
-        uses: potiuk/get-workflow-origin@v1_1
+        uses: potiuk/get-workflow-origin@08219db9dbbbec802d571eaf0e14ece0bc005f72
         id: source-run-info
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
@@ -62,7 +62,7 @@ jobs:
           echo 'EOF' >> $GITHUB_OUTPUT
 
       - name: Create or update comment
-        uses: edumserrano/find-create-or-update-comment@v1
+        uses: edumserrano/find-create-or-update-comment@60a62b88d02efeb2c405e578d3a2b47ea0b230b1
         with:
           issue-number: ${{ steps.source-run-info.outputs.pullRequestNumber }}
           body-includes: '<!-- pr-coverage -->'

.github/workflows/trivy-containers.yaml

@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - id: set-matrix
         uses: mikefarah/yq@master
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Scan container image
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.12.0
         with:
           image-ref: '${{ matrix.image }}'
           output: 'results.sarif'

.github/workflows/trivy.yaml

@@ -14,7 +14,7 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.12.0
         with:
           scan-type: 'fs'
           ignore-unfixed: true

.github/workflows/unit-tests.yaml

@@ -12,25 +12,14 @@ jobs:
       matrix:
         os: [ ubuntu-latest, windows-latest ]
     steps:
-      - id: go-cache-paths
-        run: |
-          echo "go-build=$(go env GOCACHE)" >> $GITHUB_OUTPUT
-          echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
-        shell: bash
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Set up Go
-        uses: actions/setup-go@v3
-        with:
-          go-version: 1.20.2
-
-      - name: Go Build Cache
-        uses: actions/cache@v3
+        uses: actions/setup-go@v4
         with:
-          path: ${{ steps.go-cache-paths.outputs.go-build }}
-          key: ${{ runner.os }}-cache-${{ hashFiles('**/go.sum') }}
+          go-version-file: 'go.mod'
 
       - name: Run tests
         run: |
-          go test -v  ./cmd/... ./pkg/...
+          go test -v ./cmd/... ./pkg/...