Skip to content

Commit 1cf0fe4

Browse files
Maxim-DoroninMaxim-Doronin
authored
Artifacts attestation (#200)
* Add artifacts attestation * Update pip packages and actions versions * provenance attestation for post-commits only * generate signature bundle * Dynamic repo pointer * Bump hg-hub
1 parent a826bd9 commit 1cf0fe4

16 files changed

+262
-127
lines changed

‎.github/actions/compile-models/requirements.in‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,19 @@
11
--extra-index-url https://download.pytorch.org/whl/cpu
22

33
# Core
4-
transformers>=4.56.2
4+
transformers>=4.57.1
55
torch==2.8.0+cpu
66
torchvision==0.23.0+cpu
7-
onnx>=1.18.0
8-
onnxruntime>=1.23.0
7+
onnx>=1.19.1
8+
onnxruntime>=1.23.1
99
onnxruntime-tools>=1.7.0
1010

1111
# Hugging Face Hub
12-
huggingface_hub>=0.35.3
13-
hf-xet>=1.1.10
12+
huggingface_hub>=0.36.0
13+
hf-xet>=1.2.0
1414

1515
# Utils
1616
pillow>=11.3.0
1717
requests>=2.32.5
1818
tqdm>=4.67.1
19-
accelerate>=1.10.1
19+
accelerate>=1.11.0

‎.github/actions/compile-models/requirements.txt‎

Lines changed: 128 additions & 73 deletions
Large diffs are not rendered by default.

‎.github/actions/download-models/requirements.in‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
1-
huggingface_hub>=0.35.3
2-
hf-xet>=1.1.10
1+
huggingface_hub>=1.1.2
2+
hf-xet>=1.2.0
33
requests>=2.32.5

‎.github/actions/download-models/requirements.txt‎

Lines changed: 76 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,17 @@
44
#
55
# pip-compile --generate-hashes .github/actions/download-models/requirements.in
66
#
7+
anyio==4.11.0 \
8+
--hash=sha256:0287e96f4d26d4149305414d4e3bc32f0dcd0862365a4bddea19d7a1ec38c4fc \
9+
--hash=sha256:82a8d0b81e318cc5ce71a5f1f8b5c4e63619620b63141ef8c995fa0db95a57c4
10+
# via httpx
711
certifi==2025.1.31 \
812
--hash=sha256:3d5da6925056f6f18f119200434a4780a94263f10d1c21d032a6f6b2baa20651 \
913
--hash=sha256:ca78db4565a652026a4db2bcdf68f2fb589ea80d0be70e03929ed730746b84fe
10-
# via requests
14+
# via
15+
# httpcore
16+
# httpx
17+
# requests
1118
charset-normalizer==3.4.1 \
1219
--hash=sha256:0167ddc8ab6508fe81860a57dd472b2ef4060e8d378f0cc555707126830f2537 \
1320
--hash=sha256:01732659ba9b5b873fc117534143e4feefecf3b2078b0a6a2e925271bb6f4cfa \
@@ -102,10 +109,16 @@ charset-normalizer==3.4.1 \
102109
--hash=sha256:fd4ec41f914fa74ad1b8304bbc634b3de73d2a0889bd32076342a573e0779e00 \
103110
--hash=sha256:ffc9202a29ab3920fa812879e95a9e78b2465fd10be7fcbd042899695d75e616
104111
# via requests
112+
click==8.3.0 \
113+
--hash=sha256:9b9f285302c6e3064f4330c05f05b81945b2a39544279343e6e7c5f27a9baddc \
114+
--hash=sha256:e7b8232224eba16f4ebe410c25ced9f7875cb5f3263ffc93cc3e8da705e229c4
115+
# via typer-slim
105116
colorama==0.4.6 \
106117
--hash=sha256:08695f5cb7ed6e0531a20572697297273c47b8cae5a63ffc6d6ed5c201be6e44 \
107118
--hash=sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6
108-
# via tqdm
119+
# via
120+
# click
121+
# tqdm
109122
filelock==3.18.0 \
110123
--hash=sha256:adbc88eabb99d2fec8c9c1b229b171f18afa655400173ddc653d5d01501fb9f2 \
111124
--hash=sha256:c401f4f8377c4464e6db25fff06205fd89bdd83b65eb0488ed1b160f780e21de
@@ -114,24 +127,55 @@ fsspec==2025.3.2 \
114127
--hash=sha256:2daf8dc3d1dfa65b6aa37748d112773a7a08416f6c70d96b264c96476ecaf711 \
115128
--hash=sha256:e52c77ef398680bbd6a98c0e628fbc469491282981209907bbc8aea76a04fdc6
116129
# via huggingface-hub
117-
hf-xet==1.1.10 \
118-
--hash=sha256:0a0005fd08f002180f7a12d4e13b22be277725bc23ed0529f8add5c7a6309c06 \
119-
--hash=sha256:408aef343800a2102374a883f283ff29068055c111f003ff840733d3b715bb97 \
120-
--hash=sha256:5f54b19cc347c13235ae7ee98b330c26dd65ef1df47e5316ffb1e87713ca7045 \
121-
--hash=sha256:686083aca1a6669bc85c21c0563551cbcdaa5cf7876a91f3d074a030b577231d \
122-
--hash=sha256:6b6bceb6361c80c1cc42b5a7b4e3efd90e64630bcf11224dcac50ef30a47e435 \
123-
--hash=sha256:71081925383b66b24eedff3013f8e6bbd41215c3338be4b94ba75fd75b21513b \
124-
--hash=sha256:eae7c1fc8a664e54753ffc235e11427ca61f4b0477d757cc4eb9ae374b69f09c \
125-
--hash=sha256:f900481cf6e362a6c549c61ff77468bd59d6dd082f3170a36acfef2eb6a6793f
126-
# via -r .github/actions/download-models/requirements.in
127-
huggingface-hub==0.35.3 \
128-
--hash=sha256:0e3a01829c19d86d03793e4577816fe3bdfc1602ac62c7fb220d593d351224ba \
129-
--hash=sha256:350932eaa5cc6a4747efae85126ee220e4ef1b54e29d31c3b45c5612ddf0b32a
130+
h11==0.16.0 \
131+
--hash=sha256:4e35b956cf45792e4caa5885e69fba00bdbc6ffafbfa020300e549b208ee5ff1 \
132+
--hash=sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86
133+
# via httpcore
134+
hf-xet==1.2.0 \
135+
--hash=sha256:10bfab528b968c70e062607f663e21e34e2bba349e8038db546646875495179e \
136+
--hash=sha256:210d577732b519ac6ede149d2f2f34049d44e8622bf14eb3d63bbcd2d4b332dc \
137+
--hash=sha256:27df617a076420d8845bea087f59303da8be17ed7ec0cd7ee3b9b9f579dff0e4 \
138+
--hash=sha256:293a7a3787e5c95d7be1857358a9130694a9c6021de3f27fa233f37267174382 \
139+
--hash=sha256:29c8fc913a529ec0a91867ce3d119ac1aac966e098cf49501800c870328cc090 \
140+
--hash=sha256:2a212e842647b02eb6a911187dc878e79c4aa0aa397e88dd3b26761676e8c1f8 \
141+
--hash=sha256:30e06daccb3a7d4c065f34fc26c14c74f4653069bb2b194e7f18f17cbe9939c0 \
142+
--hash=sha256:3651fd5bfe0281951b988c0facbe726aa5e347b103a675f49a3fa8144c7968fd \
143+
--hash=sha256:46740d4ac024a7ca9b22bebf77460ff43332868b661186a8e46c227fdae01848 \
144+
--hash=sha256:4c1428c9ae73ec0939410ec73023c4f842927f39db09b063b9482dac5a3bb737 \
145+
--hash=sha256:66e159cbfcfbb29f920db2c09ed8b660eb894640d284f102ada929b6e3dc410a \
146+
--hash=sha256:6de1fc44f58f6dd937956c8d304d8c2dea264c80680bcfa61ca4a15e7b76780f \
147+
--hash=sha256:7d40b18769bb9a8bc82a9ede575ce1a44c75eb80e7375a01d76259089529b5dc \
148+
--hash=sha256:9c91d5ae931510107f148874e9e2de8a16052b6f1b3ca3c1b12f15ccb491390f \
149+
--hash=sha256:a55558084c16b09b5ed32ab9ed38421e2d87cf3f1f89815764d1177081b99865 \
150+
--hash=sha256:a8c27070ca547293b6890c4bf389f713f80e8c478631432962bb7f4bc0bd7d7f \
151+
--hash=sha256:b70218dd548e9840224df5638fdc94bd033552963cfa97f9170829381179c813 \
152+
--hash=sha256:cd3a6027d59cfb60177c12d6424e31f4b5ff13d8e3a1247b3a584bf8977e6df5 \
153+
--hash=sha256:ceeefcd1b7aed4956ae8499e2199607765fbd1c60510752003b6cc0b8413b649 \
154+
--hash=sha256:d06fa97c8562fb3ee7a378dd9b51e343bc5bc8190254202c9771029152f5e08c \
155+
--hash=sha256:e6584a52253f72c9f52f9e549d5895ca7a471608495c4ecaa6cc73dba2b24d69 \
156+
--hash=sha256:f182f264ed2acd566c514e45da9f2119110e48a87a327ca271027904c70c5832
157+
# via
158+
# -r .github/actions/download-models/requirements.in
159+
# huggingface-hub
160+
httpcore==1.0.9 \
161+
--hash=sha256:2d400746a40668fc9dec9810239072b40b4484b640a8c38fd654a024c7a1bf55 \
162+
--hash=sha256:6e34463af53fd2ab5d807f399a9b45ea31c3dfa2276f15a2c3f00afff6e176e8
163+
# via httpx
164+
httpx==0.28.1 \
165+
--hash=sha256:75e98c5f16b0f35b567856f597f06ff2270a374470a5c2392242528e3e3e42fc \
166+
--hash=sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad
167+
# via huggingface-hub
168+
huggingface-hub==1.1.2 \
169+
--hash=sha256:7bdafc432dc12fa1f15211bdfa689a02531d2a47a3cc0d74935f5726cdbcab8e \
170+
--hash=sha256:dfcfa84a043466fac60573c3e4af475490a7b0d7375b22e3817706d6659f61f7
130171
# via -r .github/actions/download-models/requirements.in
131172
idna==3.10 \
132173
--hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
133174
--hash=sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3
134-
# via requests
175+
# via
176+
# anyio
177+
# httpx
178+
# requests
135179
packaging==24.2 \
136180
--hash=sha256:09abb1bccd265c01f4a3aa3f7a7db064b36514d2cba19a2f694fe6150451a759 \
137181
--hash=sha256:c228a6dc5e932d346bc5739379109d49e8853dd8223571c7c5b55260edc0b97f
@@ -194,17 +238,29 @@ pyyaml==6.0.2 \
194238
requests==2.32.5 \
195239
--hash=sha256:2462f94637a34fd532264295e186976db0f5d453d1cdd31473c85a6a161affb6 \
196240
--hash=sha256:dbba0bac56e100853db0ea71b82b4dfd5fe2bf6d3754a8893c3af500cec7d7cf
197-
# via
198-
# -r .github/actions/download-models/requirements.in
199-
# huggingface-hub
241+
# via -r .github/actions/download-models/requirements.in
242+
shellingham==1.5.4 \
243+
--hash=sha256:7ecfff8f2fd72616f7481040475a65b2bf8af90a56c89140852d1120324e8686 \
244+
--hash=sha256:8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de
245+
# via huggingface-hub
246+
sniffio==1.3.1 \
247+
--hash=sha256:2f6da418d1f1e0fddd844478f41680e794e6051915791a034ff65e5f100525a2 \
248+
--hash=sha256:f4324edc670a0f49750a81b895f35c3adb843cca46f0530f79fc1babb23789dc
249+
# via anyio
200250
tqdm==4.67.1 \
201251
--hash=sha256:26445eca388f82e72884e0d580d5464cd801a3ea01e63e5601bdff9ba6a48de2 \
202252
--hash=sha256:f8aef9c52c08c13a65f30ea34f4e5aac3fd1a34959879d7e59e63027286627f2
203253
# via huggingface-hub
254+
typer-slim==0.20.0 \
255+
--hash=sha256:9fc6607b3c6c20f5c33ea9590cbeb17848667c51feee27d9e314a579ab07d1a3 \
256+
--hash=sha256:f42a9b7571a12b97dddf364745d29f12221865acef7a2680065f9bb29c7dc89d
257+
# via huggingface-hub
204258
typing-extensions==4.13.2 \
205259
--hash=sha256:a439e7c04b49fec3e5d3e2beaa21755cadbbdc391694e28ccdd36ca4a1408f8c \
206260
--hash=sha256:e6c81219bd689f51865d9e372991c540bda33a0379d5573cddb9a3a23f7caaef
207-
# via huggingface-hub
261+
# via
262+
# huggingface-hub
263+
# typer-slim
208264
urllib3==2.5.0 \
209265
--hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \
210266
--hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc

‎.github/workflows/codeql.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,13 +33,13 @@ jobs:
3333
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3434

3535
- name: Initialize CodeQL
36-
uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
36+
uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
3737
with:
3838
languages: ${{ matrix.language }}
3939
build-mode: ${{ matrix.build-mode }}
4040

4141
- name: Perform CodeQL Analysis
42-
uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
42+
uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
4343
with:
4444
category: "/language:${{matrix.language}}"
4545

‎.github/workflows/job_build_cid.yml‎

Lines changed: 28 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,7 @@ jobs:
9393
packages: read
9494
statuses: read
9595
id-token: write
96+
attestations: write
9697
outputs:
9798
build-package: ${{ steps.set-build-package-name.outputs.build-package }}
9899
env:
@@ -157,8 +158,8 @@ jobs:
157158
VERSION="${{ steps.versions.outputs.npu-compiler-version }}"
158159
EXTENSION="${{ steps.package-params.outputs.package-extension }}"
159160
160-
cid_package_base_name="${BASE_PREFIX}_vpux_compiler_l0_${PLATFORM}-${VERSION}-${CMAKE_BUILD_TYPE}"
161-
cid_package_base_name+="_dyntbb_${CI_CONTEXT}_cid_${{ github.sha }}_${TIME_STAMP}"
161+
cid_package_base_name="${BASE_PREFIX}_vpux_compiler_l0_${PLATFORM}_${{ inputs.os }}-${VERSION}-"
162+
cid_package_base_name+="${CMAKE_BUILD_TYPE}_dyntbb_${CI_CONTEXT}_cid_${{ github.sha }}_${TIME_STAMP}"
162163
cid_package_full_name="${cid_package_base_name}.${EXTENSION}"
163164
164165
echo "CiD package will be generated with the following name: $cid_package_full_name"
@@ -320,7 +321,7 @@ jobs:
320321
key: ${{ steps.cache-key.outputs.cache-key }}
321322

322323
- name: Upload CiD package
323-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
324+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
324325
with:
325326
name: ${{ steps.package-name.outputs.cid-package-full-name }}
326327
path: |
@@ -331,9 +332,15 @@ jobs:
331332
run: |
332333
echo "build-package=${{ steps.package-name.outputs.cid-package-full-name }}" >> $GITHUB_OUTPUT
333334
335+
- name: Generate build provenance attestation
336+
if: ${{ github.event_name != 'pull_request' && inputs.publish-release-assets }}
337+
uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
338+
with:
339+
subject-path: ${{ env.CID_PACKAGE_ARTIFACTS_DIR }}/${{ steps.package-name.outputs.cid-package-full-name }}
340+
334341
- name: Install cosign
335342
if: ${{ github.event_name != 'pull_request' && inputs.publish-release-assets }}
336-
uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
343+
uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
337344

338345
- name: Sign CiD package with cosign
339346
if: ${{ github.event_name != 'pull_request' && inputs.publish-release-assets }}
@@ -342,8 +349,20 @@ jobs:
342349
run: |
343350
cosign sign-blob \
344351
--yes \
345-
--output-signature "${ARCHIVE}.sig" \
346-
--output-certificate "${ARCHIVE}.pem" \
352+
--bundle "${ARCHIVE}.sigstore.json" \
353+
"${ARCHIVE}"
354+
355+
- name: Verify CiD bundle (keyless)
356+
if: ${{ github.event_name != 'pull_request' && inputs.publish-release-assets }}
357+
env:
358+
ARCHIVE: ${{ env.CID_PACKAGE_ARTIFACTS_DIR }}/${{ steps.package-name.outputs.cid-package-full-name }}
359+
run: |
360+
NPU_TAG="${{ steps.versions.outputs.npu-compiler-tag }}"
361+
NPU_REPO="${{ steps.versions.outputs.npu-compiler-repository }}"
362+
cosign verify-blob \
363+
--bundle "${ARCHIVE}.sigstore.json" \
364+
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
365+
--certificate-identity https://github.com/$NPU_REPO/.github/workflows/job_build_cid.yml@refs/tags/$NPU_TAG \
347366
"${ARCHIVE}"
348367
349368
- name: Upload asset to existing release tag
@@ -354,8 +373,7 @@ jobs:
354373
NPU_TAG="${{ steps.versions.outputs.npu-compiler-tag }}"
355374
NPU_REPO="${{ steps.versions.outputs.npu-compiler-repository }}"
356375
CID_ASSET="${CID_PACKAGE_ARTIFACTS_DIR}/${{ steps.package-name.outputs.cid-package-full-name }}"
357-
CID_SIG="${CID_ASSET}.sig"
358-
CID_CERT="${CID_ASSET}.pem"
376+
CID_BUNDLE="${CID_ASSET}.sigstore.json"
359377
360-
gh release upload "$NPU_TAG" "$CID_ASSET" "$CID_SIG" "$CID_CERT" --clobber --repo "$NPU_REPO"
361-
echo "Uploaded $CID_ASSET with $CID_SIG and $CID_CERT to release $NPU_TAG"
378+
gh release upload "$NPU_TAG" "$CID_ASSET" "$CID_BUNDLE" --clobber --repo "$NPU_REPO"
379+
echo "Uploaded $CID_ASSET with $CID_BUNDLE to release $NPU_TAG"

‎.github/workflows/job_build_drv_linux.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,7 @@ jobs:
149149
key: ${{ steps.cache-key.outputs.cache-key }}
150150

151151
- name: Upload artifacts
152-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
152+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
153153
with:
154154
path: ${{ env.NPU_DRIVER_INSTALL_DIR }}
155155
name: ${{ env.NPU_DRIVER_BUILD_PACKAGE }}

‎.github/workflows/job_build_mlir_linux.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,7 @@ jobs:
152152
153153
- name: Initialize CodeQL
154154
if: ${{ !steps.cache-restore.outputs.cache-hit && inputs.with-codeql }}
155-
uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
155+
uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
156156
with:
157157
languages: c-cpp
158158
build-mode: manual
@@ -239,7 +239,7 @@ jobs:
239239
- name: Perform CodeQL Analysis
240240
id: codeql-analyze
241241
if: ${{ !steps.cache-restore.outputs.cache-hit && inputs.with-codeql }}
242-
uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
242+
uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
243243
with:
244244
category: "/language:c-cpp"
245245
output: ${{ env.CODEQL_OUTPUTS }}
@@ -262,14 +262,14 @@ jobs:
262262
263263
- name: Upload CodeQL SARIF
264264
if: ${{ !steps.cache-restore.outputs.cache-hit && inputs.with-codeql }}
265-
uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
265+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
266266
with:
267267
sarif_file: ${{ env.CODEQL_OUTPUTS }}/filtered-results.sarif
268268
checkout_path: ${{ env.NPU_COMPILER_REPO }}
269269

270270
- name: Upload CodeQL loc as a Build Artifact
271271
if: ${{ !steps.cache-restore.outputs.cache-hit && inputs.with-codeql }}
272-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
272+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
273273
with:
274274
name: ${{ env.CODEQL_ARTIFACT_NAME }}
275275
path: ${{ env.CODEQL_OUTPUTS }}
@@ -283,7 +283,7 @@ jobs:
283283
key: ${{ steps.cache-key.outputs.cache-key }}
284284

285285
- name: Upload artifacts
286-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
286+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
287287
with:
288288
path: ${{ env.OPENVINO_INSTALL_DIR }}
289289
name: ${{ env.OPENVINO_BUILD_PACKAGE }}

‎.github/workflows/job_linux.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -126,6 +126,7 @@ jobs:
126126
packages: read
127127
statuses: read
128128
id-token: write
129+
attestations: write
129130
with:
130131
os: ${{ inputs.os }}
131132
build-runner: ${{ inputs.build-runner }}

‎.github/workflows/job_tests_compilation_linux.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6060

6161
- name: Download artifacts
62-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
62+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
6363
with:
6464
name: ${{ inputs.install-package }}
6565
path: ${{ env.INSTALL_PACKAGE_DIR }}
@@ -100,14 +100,14 @@ jobs:
100100

101101
- name: Upload logs artifacts
102102
if: ${{ always() && env.LOGS_DIR }}
103-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
103+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
104104
with:
105105
path: ${{ env.LOGS_DIR }}
106106
name: ${{ env.LOGS_ARTIFACT_NAME }}
107107

108108
- name: Upload blobs artifacts
109109
if: ${{ always() && inputs.export-blobs && env.BLOBS_DIR }}
110-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
110+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
111111
with:
112112
path: ${{ env.BLOBS_DIR }}
113113
name: ${{ env.BLOBS_ARTIFACT_NAME }}

0 commit comments

Comments
 (0)