@@ -161,25 +161,26 @@ jobs:
161161 - name : Set up Docker Buildx
162162 uses : docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
163163 - name : Login to GitHub Container Registry
164- uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7 .0
164+ uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
165165 with :
166166 registry : ghcr.io
167167 username : ${{ github.actor }}
168168 password : ${{ secrets.GITHUB_TOKEN }}
169169 - name : Login to Docker Hub
170170 if : ${{ github.repository_owner == 'OSGeo' && github.event_name != 'pull_request' }}
171- uses : docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7 .0
171+ uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
172172 with :
173173 username : ${{ secrets.DOCKERHUB_USERNAME }}
174174 password : ${{ secrets.DOCKERHUB_TOKEN }}
175175 - name : Build and push
176176 id : docker_build
177- uses : docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
177+ uses : docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
178178 with :
179179 push : ${{ github.event_name != 'pull_request' }}
180180 context : .
181181 build-args : ${{ matrix.build_args }}
182182 tags : ${{ steps.meta.outputs.tags }}
183+ labels : ${{ steps.meta.outputs.labels }}
183184 file : ${{ matrix.dockerfile }}
184185 annotations : ${{ steps.meta.outputs.annotations }}
185186 provenance : mode=max
@@ -196,7 +197,7 @@ jobs:
196197 env :
197198 STEPS_DOCKER_BUILD_OUTPUTS_DIGEST : ${{ steps.docker_build.outputs.digest }}
198199 - name : Attest docker.io image
199- uses : actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2 .0
200+ uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1 .0
200201 # If there isn't a digest, an annotation cannot be added
201202 if : >-
202203 ${{ github.repository_owner == 'OSGeo' && github.event_name != 'pull_request'
@@ -207,7 +208,7 @@ jobs:
207208 subject-digest : ${{ steps.docker_build.outputs.digest }}
208209 push-to-registry : ${{ github.repository_owner == 'OSGeo' && github.event_name != 'pull_request' }}
209210 - name : Attest ghcr.io image
210- uses : actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2 .0
211+ uses : actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1 .0
211212 # If there isn't a digest, an annotation cannot be added
212213 if : ${{ steps.docker_build.outputs.digest }}
213214 id : attest-ghcr
0 commit comments