diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml index e5764c5..0c4f374 100644 --- a/.github/workflows/pr-checks.yml +++ b/.github/workflows/pr-checks.yml @@ -12,7 +12,7 @@ jobs: name: ✅ Validación de PR runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Check PR title format run: | @@ -59,7 +59,7 @@ jobs: name: 🔒 Revisión de Cambios Sensibles runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -108,16 +108,16 @@ jobs: name: 🐳 Dockerfile Linting runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Lint Dockerfiles with hadolint - uses: hadolint/hadolint-action@v3.1.0 + uses: hadolint/hadolint-action@v3.5.0 with: dockerfile: docker/kali/Dockerfile failure-threshold: warning - name: Lint MCP Dockerfile - uses: hadolint/hadolint-action@v3.1.0 + uses: hadolint/hadolint-action@v3.5.0 with: dockerfile: docker/mcp/Dockerfile failure-threshold: warning @@ -134,7 +134,7 @@ jobs: pull-requests: write steps: - name: Comment PR - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: script: | const jobs = ${{ toJSON(needs) }}; diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 8f30f80..2dbeb71 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 # Historial completo para TruffleHog @@ -48,7 +48,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v3 @@ -71,10 +71,10 @@ jobs: name: 🐍 Python Linting runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.13' @@ -104,7 +104,7 @@ jobs: - name: Upload bandit results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: bandit-security-report path: bandit-report.json @@ -116,10 +116,10 @@ jobs: name: 📦 Escaneo de Dependencias runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.13' @@ -142,7 +142,7 @@ jobs: - name: Upload safety reports if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: safety-reports path: | @@ -156,7 +156,7 @@ jobs: name: 🐳 Trivy - Escaneo de Imágenes Docker runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build Kali image run: docker build -t vulnerator-kali:test -f docker/kali/Dockerfile docker/kali @@ -201,7 +201,7 @@ jobs: name: ⚙️ Escaneo de Configuración runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Detect secrets in config files run: |