From 4aa2069655a5d4c3fda9d3ee09bb552951d630d5 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 31 Oct 2022 10:26:17 +0100
Subject: [PATCH] Update github actions dependencies (#397)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Malte Poll <mp@edgeless.systems>
---
 .github/workflows/build-os-image.yml  | 6 +++---
 .github/workflows/test-helm-lint.yaml | 2 +-
 .github/workflows/test-tf.yml         | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/build-os-image.yml b/.github/workflows/build-os-image.yml
index 12513efc8..c02578d42 100644
--- a/.github/workflows/build-os-image.yml
+++ b/.github/workflows/build-os-image.yml
@@ -437,19 +437,19 @@ jobs:
           unsquashfs -user-xattrs -d image.root.tree image.root.raw
           echo "::endgroup::"
 
-      - uses: anchore/sbom-action@b5042e9d19d8b32849779bfe17673ff84aec702d # tag=v0.12.0
+      - uses: anchore/sbom-action@b7e8507c6a3c89b7099a0198366d862c8f3ad8f1 # tag=v0.13.0
         with:
           path: image.root.tree
           artifact-name: sbom.spdx.json
           format: spdx-json
 
-      - uses: anchore/sbom-action@b5042e9d19d8b32849779bfe17673ff84aec702d # tag=v0.12.0
+      - uses: anchore/sbom-action@b7e8507c6a3c89b7099a0198366d862c8f3ad8f1 # tag=v0.13.0
         with:
           path: image.root.tree
           artifact-name: sbom.cyclonedx.json
           format: cyclonedx-json
 
-      - uses: anchore/sbom-action@b5042e9d19d8b32849779bfe17673ff84aec702d # tag=v0.12.0
+      - uses: anchore/sbom-action@b7e8507c6a3c89b7099a0198366d862c8f3ad8f1 # tag=v0.13.0
         with:
           path: image.root.tree
           artifact-name: sbom.syft.json
diff --git a/.github/workflows/test-helm-lint.yaml b/.github/workflows/test-helm-lint.yaml
index cf059eb6b..fd03afee6 100644
--- a/.github/workflows/test-helm-lint.yaml
+++ b/.github/workflows/test-helm-lint.yaml
@@ -29,7 +29,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Setup Helm
-        uses: azure/setup-helm@b5b231a831f96336bbfeccc1329990f0005c5bb1 # tag=v3
+        uses: azure/setup-helm@f382f75448129b3be48f8121b9857be18d815a82 # tag=v3
         with:
           version: "v3.9.0" # default is latest (stable)
 
diff --git a/.github/workflows/test-tf.yml b/.github/workflows/test-tf.yml
index a67e684dd..5c5501211 100644
--- a/.github/workflows/test-tf.yml
+++ b/.github/workflows/test-tf.yml
@@ -23,7 +23,7 @@ jobs:
           ref: ${{ github.head_ref }}
 
       - name: Setup Terraform
-        uses: hashicorp/setup-terraform@a2a0e9d877cffca80feedfc0d9072834be6c42e7
+        uses: hashicorp/setup-terraform@bbe167fbdaa1a3bd046bdd70eba9dd3dddcca99c # tag=v2.0.2
 
       - name: Terraform format and validate
         shell: bash