@ -58,13 +58,13 @@ jobs:
steps:
steps:
- name : Initialize QEMU binfmt support
- name : Initialize QEMU binfmt support
uses : docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1 .0
uses : docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2 .0
with:
with:
platforms : "arm64,arm"
platforms : "arm64,arm"
# Start Docker Buildx
# Start Docker Buildx
- name : Setup Docker Buildx
- name : Setup Docker Buildx
uses : docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1 .0
uses : docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2 .0
# https://github.com/moby/buildkit/issues/3969
# https://github.com/moby/buildkit/issues/3969
# Also set max parallelism to 2, the default of 4 breaks GitHub Actions and causes OOMKills
# Also set max parallelism to 2, the default of 4 breaks GitHub Actions and causes OOMKills
with:
with:
@ -77,7 +77,7 @@ jobs:
# Checkout the repo
# Checkout the repo
- name : Checkout
- name : Checkout
uses : actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
# We need fetch-depth of 0 so we also get all the tag metadata
# We need fetch-depth of 0 so we also get all the tag metadata
with:
with:
persist-credentials : false
persist-credentials : false
@ -106,7 +106,7 @@ jobs:
# Login to Docker Hub
# Login to Docker Hub
- name : Login to Docker Hub
- name : Login to Docker Hub
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
username : ${{ secrets.DOCKERHUB_USERNAME }}
username : ${{ secrets.DOCKERHUB_USERNAME }}
password : ${{ secrets.DOCKERHUB_TOKEN }}
password : ${{ secrets.DOCKERHUB_TOKEN }}
@ -121,7 +121,7 @@ jobs:
# Login to GitHub Container Registry
# Login to GitHub Container Registry
- name : Login to GitHub Container Registry
- name : Login to GitHub Container Registry
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
registry : ghcr.io
registry : ghcr.io
username : ${{ github.repository_owner }}
username : ${{ github.repository_owner }}
@ -137,7 +137,7 @@ jobs:
# Login to Quay.io
# Login to Quay.io
- name : Login to Quay.io
- name : Login to Quay.io
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
registry : quay.io
registry : quay.io
username : ${{ secrets.QUAY_USERNAME }}
username : ${{ secrets.QUAY_USERNAME }}
@ -185,7 +185,7 @@ jobs:
- name : Bake ${{ matrix.base_image }} containers
- name : Bake ${{ matrix.base_image }} containers
id : bake_vw
id : bake_vw
uses : docker/bake-action@6614cfa25eff9a0b2b2697efb0b6159e7680d584 # v7.2 .0
uses : docker/bake-action@d3418bd7d0e9324001bca92fa8ba175ea7e6dc9b # v7.3 .0
env:
env:
BASE_TAGS : "${{ steps.determine-version.outputs.BASE_TAGS }}"
BASE_TAGS : "${{ steps.determine-version.outputs.BASE_TAGS }}"
SOURCE_COMMIT : "${{ env.SOURCE_COMMIT }}"
SOURCE_COMMIT : "${{ env.SOURCE_COMMIT }}"
@ -237,7 +237,7 @@ jobs:
# Upload artifacts to Github Actions and Attest the binaries
# Upload artifacts to Github Actions and Attest the binaries
- name : Attest binaries
- name : Attest binaries
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
uses : actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
with:
with:
subject-path : vaultwarden-${{ env.NORMALIZED_ARCH }}
subject-path : vaultwarden-${{ env.NORMALIZED_ARCH }}
@ -272,7 +272,7 @@ jobs:
# Login to Docker Hub
# Login to Docker Hub
- name : Login to Docker Hub
- name : Login to Docker Hub
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
username : ${{ secrets.DOCKERHUB_USERNAME }}
username : ${{ secrets.DOCKERHUB_USERNAME }}
password : ${{ secrets.DOCKERHUB_TOKEN }}
password : ${{ secrets.DOCKERHUB_TOKEN }}
@ -287,7 +287,7 @@ jobs:
# Login to GitHub Container Registry
# Login to GitHub Container Registry
- name : Login to GitHub Container Registry
- name : Login to GitHub Container Registry
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
registry : ghcr.io
registry : ghcr.io
username : ${{ github.repository_owner }}
username : ${{ github.repository_owner }}
@ -303,7 +303,7 @@ jobs:
# Login to Quay.io
# Login to Quay.io
- name : Login to Quay.io
- name : Login to Quay.io
uses : docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2 .0
uses : docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4 .0
with:
with:
registry : quay.io
registry : quay.io
username : ${{ secrets.QUAY_USERNAME }}
username : ${{ secrets.QUAY_USERNAME }}
@ -365,7 +365,7 @@ jobs:
# Attest container images
# Attest container images
- name : Attest - docker.io - ${{ matrix.base_image }}
- name : Attest - docker.io - ${{ matrix.base_image }}
if : ${{ vars.DOCKERHUB_REPO != '' && env.DIGEST_SHA != ''}}
if : ${{ vars.DOCKERHUB_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
uses : actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
with:
with:
subject-name : ${{ vars.DOCKERHUB_REPO }}
subject-name : ${{ vars.DOCKERHUB_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}
subject-digest : ${{ env.DIGEST_SHA }}
@ -373,7 +373,7 @@ jobs:
- name : Attest - ghcr.io - ${{ matrix.base_image }}
- name : Attest - ghcr.io - ${{ matrix.base_image }}
if : ${{ vars.GHCR_REPO != '' && env.DIGEST_SHA != ''}}
if : ${{ vars.GHCR_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
uses : actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
with:
with:
subject-name : ${{ vars.GHCR_REPO }}
subject-name : ${{ vars.GHCR_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}
subject-digest : ${{ env.DIGEST_SHA }}
@ -381,7 +381,7 @@ jobs:
- name : Attest - quay.io - ${{ matrix.base_image }}
- name : Attest - quay.io - ${{ matrix.base_image }}
if : ${{ vars.QUAY_REPO != '' && env.DIGEST_SHA != ''}}
if : ${{ vars.QUAY_REPO != '' && env.DIGEST_SHA != ''}}
uses : actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
uses : actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1
with:
with:
subject-name : ${{ vars.QUAY_REPO }}
subject-name : ${{ vars.QUAY_REPO }}
subject-digest : ${{ env.DIGEST_SHA }}
subject-digest : ${{ env.DIGEST_SHA }}