diff --git a/.github/workflows/keyless-salsa-integration.yaml b/.github/workflows/keyless-salsa-integration.yaml index 381ad75..b5749ae 100644 --- a/.github/workflows/keyless-salsa-integration.yaml +++ b/.github/workflows/keyless-salsa-integration.yaml @@ -21,7 +21,7 @@ jobs: - name: Checkout Code uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # ratchet:actions/checkout@v3 - name: Authenticate to Google Cloud - uses: google-github-actions/auth@e8df18b60c5dd38ba618c121b779307266153fbf # ratchet:google-github-actions/auth@v1.1.0 + uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363 # ratchet:google-github-actions/auth@v2.1.0 id: google with: workload_identity_provider: ${{ secrets.SLSA_WORKLOAD_IDENTITY_PROVIDER }} diff --git a/.github/workflows/service-account-salsa-integration.yml b/.github/workflows/service-account-salsa-integration.yml index 31a0fc6..eeb8bdf 100644 --- a/.github/workflows/service-account-salsa-integration.yml +++ b/.github/workflows/service-account-salsa-integration.yml @@ -23,7 +23,7 @@ jobs: # Credentials needed to authenticate to google kms and sign image. - name: Authenticate to Google Cloud id: google - uses: google-github-actions/auth@e8df18b60c5dd38ba618c121b779307266153fbf # ratchet:google-github-actions/auth@v0 + uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363 # ratchet:google-github-actions/auth@v0 with: credentials_json: ${{ secrets.SALSA_CREDENTIALS }} # For demonstration purpose