external-dns/.github/workflows/dependency-update.yaml
Raffaele Di Fazio 109fd6559f
Pin all GitHub Actions to commit SHAs per Kubernetes policy (#6316)
Pin all uses: references in workflow files to 40-character commit
SHA hashes instead of mutable tags, as required by the Kubernetes
GitHub Actions security policy.

Actions pinned:
- actions/setup-go v6.3.0
- actions/setup-python v6
- actions/checkout v6
- coverallsapp/github-action v2
- github/codeql-action v4
- golangci/golangci-lint-action v9
- GrantBirki/json-yaml-validate v4.0.0
- nosborn/github-action-markdown-cli v3.5.0
- pre-commit/action v3.0.1
- renovatebot/github-action v46.1.4
2026-03-27 20:14:47 +05:30

27 lines
852 B
YAML

name: update-versions-with-renovate
on:
push:
branches: [main, master]
schedule:
# https://crontab.guru/
# once a day
- cron: '0 0 * * *'
jobs:
update-versions-with-renovate:
runs-on: ubuntu-latest
if: github.repository == 'kubernetes-sigs/external-dns'
steps:
- name: checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
# https://github.com/renovatebot/github-action
- name: self-hosted renovate
uses: renovatebot/github-action@0b17c4eb901eca44d018fb25744a50a74b2042df # v46.1.4
with:
# https://docs.github.com/en/actions/security-for-github-actions/security-guides/automatic-token-authentication
token: ${{ secrets.GITHUB_TOKEN }}
configurationFile: .github/renovate-config.js
env:
LOG_LEVEL: info