redhat-cop / redhat-cop/github-actions

Dependency Dashboard

Open
#87 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
12
Forks
14
No merged PRs in 30d

Description

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository Problems

These problems occurred while renovating this repository. View logs.

  • ⚠️ WARN: Blocked HTTP request: hostname resolves to a blocked address
  • ⚠️ WARN: Package lookup failures

Abandoned Dependencies

The following dependencies have not received updates for an extended period and may be unmaintained.

[!NOTE]
Packages are marked as abandoned when they exceed the abandonmentThreshold since their last release. Unlike deprecated packages with official notices, abandonment is detected by release inactivity.

View abandoned dependencies (2)
Datasource Package Last Updated
github-actions slsa-framework/slsa-github-generator 2025-02-24
regex plexsystems/konstraint 2025-06-10

Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

  • Update actions/setup-node action to v6.5.0
  • Update aquasecurity/trivy-action action to v0.36.0
  • Update dependency argcomplete to v3.7.2
  • Update dependency helm/helm to v4.3.0
  • Update dependency open-policy-agent/conftest to v0.70.0
  • Update dependency open-policy-agent/opa to v1.20.2
  • Update hadolint/hadolint-action action to v3.5.0
  • Update registry.access.redhat.com/ubi9/ubi Docker tag to v9.8-1789646010
  • Update actions/checkout action to v7
  • Update actions/setup-node action to v7
  • Update dependency yq to v4
  • Update redhat-actions/buildah-build action to v3
  • Update redhat-actions/push-to-registry action to v3
  • Update sigstore/cosign-installer action to v4
  • πŸ” Create all rate-limited PRs at once πŸ”

[!WARNING]
Renovate failed to look up the following dependencies: Failed to look up repology package homebrew/openshift-cli: no-result.

Files affected: confbatstest/Dockerfile_build

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

Detected Dependencies

dockerfile (3)
confbatstest/Dockerfile (1)
  • ghcr.io/redhat-cop/github-actions/confbatstest v4.5@sha256:14ed9e3c82b7c5ef672fd0075ca94ae3cdaf7b026a404d4d62b713c7cdb9c93c β†’ [Updates: v4.5]
confbatstest/Dockerfile_build (3)
  • registry.access.redhat.com/ubi9/go-toolset sha256:36077bc7ad852d91162bf017460de6fef84bf3c2c887be05cd1c761885ef2ac3 β†’ [Updates: undefined]
  • registry.access.redhat.com/ubi9/ubi 9.7-1775624009@sha256:039095faabf1edde946ff528b3b6906efa046ee129f3e33fd933280bb6936221 β†’ [Updates: 9.8-1789646010]
  • registry.access.redhat.com/ubi9/python-39 9.8-1786927960@sha256:cc8305300a92d0f77e7c80715406014cfe8c0af38465f51ed9cea48894a82889 β†’ [Updates: 9.8-1789345358]
disconnected-csv/Dockerfile (1)
  • quay.io/skopeo/stable v1.21.0 β†’ [Updates: v1.22.2]
github-actions (14)
.github/workflows/confbatstest-build.yaml (9)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
  • redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 β†’ [Updates: v3, v2]
  • redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c β†’ [Updates: v3, v2]
  • sigstore/cosign-installer v3@398d4b0eeef1380460a10c8013a76f728fb906ac β†’ [Updates: v4.1.2]
  • aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • aquasecurity/trivy-action v0.35.0@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 β†’ [Updates: v0.36.0]
  • slsa-framework/slsa-github-generator v2.1.0
.github/workflows/confbatstest.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/disconnected-csv.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/get-image-version.yaml (1)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
.github/workflows/github-dispatches-build.yaml (5)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
  • redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 β†’ [Updates: v3, v2]
  • redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c β†’ [Updates: v3, v2]
.github/workflows/github-dispatches.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/kyverno-cli-build.yaml (5)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
  • redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 β†’ [Updates: v3, v2]
  • redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c β†’ [Updates: v3, v2]
.github/workflows/kyverno-cli.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/redhat-csp-download-build.yaml (5)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • redhat-cop/github-actions v4.6@cc45c69b6655161f278271cd0c68ddcc1444a3f8
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
  • redhat-actions/buildah-build v2@7a95fa7ee0f02d552a32753e7414641a04307056 β†’ [Updates: v3, v2]
  • redhat-actions/push-to-registry v2@5ed88d269cf581ea9ef6dd6806d01562096bee9c β†’ [Updates: v3, v2]
.github/workflows/redhat-csp-download.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/scorecard.yml (4)
  • actions/checkout v6.1.0@d23441a48e516b6c34aea4fa41551a30e30af803 β†’ [Updates: v7.0.1]
  • ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a β†’ [Updates: v2.4.4]
  • actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
  • github/codeql-action v4.37.7@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd β†’ [Updates: v4.38.1]
.github/workflows/set-helm-version.yaml (2)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • hadolint/hadolint-action v3.3.0@2332a7b74a6de0dda2e2221d575162eba76ba5e5 β†’ [Updates: v3.5.0]
.github/workflows/ssh-agent-build.yaml (3)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
  • actions/setup-node v6.3.0@53b83947a5a98c8d113130e565377fae1a50d02f β†’ [Updates: v6.5.0, v7.0.0]
  • node 24
.github/workflows/ssh-agent.yaml (1)
  • actions/checkout v6@8e8c483db84b4bee98b60c0593521ed34d9990e8 β†’ [Updates: v7, v6]
pip_requirements (1)
confbatstest/requirements.txt (5)
  • argcomplete ==3.6.3 β†’ [Updates: ==3.7.2]
  • PyYAML ==6.0.3
  • tomlkit ==0.13.3 β†’ [Updates: ==0.15.1]
  • xmltodict ==1.0.2 β†’ [Updates: ==1.0.4]
  • yq ==3.4.3 β†’ [Updates: ==4.1.2]
regex (1)
confbatstest/Dockerfile_build (6)
  • plexsystems/konstraint v0.43.0
  • helm/helm v4.1.4 β†’ [Updates: v4.3.0]
  • stedolan/jq 1.6
  • homebrew/openshift-cli 4.21.8
  • open-policy-agent/opa v1.15.2 β†’ [Updates: v1.20.2]
  • open-policy-agent/conftest v0.69.0 β†’ [Updates: v0.70.0]
  • Check this box to trigger a request for Renovate to run again on this repository

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up β€” it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Renovate dashboard, the listed .github/workflows files, confbatstest/Dockerfile_build, and confbatstest/requirements.txt. Review the existing update PRs and the reported package lookup and blocked-request warnings. Done would require a decided scope for the dependency maintenance and resolution of the selected updates or repository problems.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, github-actions, helm, python
Domain
build-system, ci-cd, devops
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.