update github workflows to use latest version of checkout and setup-python

.github/workflows/build.yml

@@ -39,11 +39,11 @@ jobs:
  python_version: 3.8
  steps:
  - name: Checkout capa
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  submodules: true
  - name: Set up Python ${{ matrix.python_version }}
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: ${{ matrix.python_version }}
  - if: matrix.os == 'ubuntu-20.04'
@@ -66,7 +66,7 @@ jobs:
  run: |
  7z e "tests/data/dynamic/cape/v2.2/d46900384c78863420fb3e297d0a2f743cd2b6b3f7f82bf64059a168e07aceb7.json.gz"
  dist/capa -d "d46900384c78863420fb3e297d0a2f743cd2b6b3f7f82bf64059a168e07aceb7.json"
- - uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+ - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: ${{ matrix.asset_name }}
  path: dist/${{ matrix.artifact_name }}
@@ -90,7 +90,7 @@ jobs:
  asset_name: windows
  steps:
  - name: Download ${{ matrix.asset_name }}
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+ uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
  with:
  name: ${{ matrix.asset_name }}
  - name: Set executable flag
@@ -118,7 +118,7 @@ jobs:
  artifact_name: capa
  steps:
  - name: Download ${{ matrix.asset_name }}
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
+ uses: actions/download-artifact@eaceaf801fd36c7dee90939fad912460b18a1ffe # v4.1.2
  with:
  name: ${{ matrix.asset_name }}
  - name: Set executable flag

.github/workflows/publish.yml

@@ -17,9 +17,9 @@ jobs:
  permissions:
  id-token: write
  steps:
- - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  - name: Set up Python
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: '3.8'
  - name: Install dependencies
@@ -30,7 +30,7 @@ jobs:
  run: |
  python -m build
  - name: upload package artifacts
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  path: dist/*
  - name: publish package

.github/workflows/scorecard.yml

@@ -59,7 +59,7 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: SARIF file
  path: results.sarif

.github/workflows/tag.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-20.04
  steps:
  - name: Checkout capa-rules
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  repository: mandiant/capa-rules
  token: ${{ secrets.CAPA_TOKEN }}

.github/workflows/tests.yml

@@ -17,7 +17,7 @@ jobs:
  runs-on: ubuntu-20.04
  steps:
  - name: Checkout capa
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  # The sync GH action in capa-rules relies on a single '- *$' in the CHANGELOG file
  - name: Ensure CHANGELOG has '- *$'
  run: |
@@ -28,10 +28,10 @@ jobs:
  runs-on: ubuntu-20.04
  steps:
  - name: Checkout capa
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  # use latest available python to take advantage of best performance
  - name: Set up Python 3.11
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: "3.11"
  - name: Install dependencies
@@ -51,11 +51,11 @@ jobs:
  runs-on: ubuntu-20.04
  steps:
  - name: Checkout capa with submodules
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  submodules: recursive
  - name: Set up Python 3.11
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: "3.11"
  - name: Install capa
@@ -83,11 +83,11 @@ jobs:
  python-version: "3.10"
  steps:
  - name: Checkout capa with submodules
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  submodules: recursive
  - name: Set up Python ${{ matrix.python-version }}
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: ${{ matrix.python-version }}
  - name: Install pyyaml
@@ -116,12 +116,12 @@ jobs:
  - name: Checkout capa with submodules
  # do only run if BN_SERIAL is available, have to do this in every step, see https://github.com/orgs/community/discussions/26726#discussioncomment-3253118
  if: ${{ env.BN_SERIAL != 0 }}
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  submodules: recursive
  - name: Set up Python ${{ matrix.python-version }}
  if: ${{ env.BN_SERIAL != 0 }}
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: ${{ matrix.python-version }}
  - name: Install pyyaml
@@ -160,15 +160,15 @@ jobs:
  ghidrathon-version: ["3.0.0"]
  steps:
  - name: Checkout capa with submodules
- uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
+ uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
  with:
  submodules: true
  - name: Set up Python ${{ matrix.python-version }}
- uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4.5.0
+ uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0
  with:
  python-version: ${{ matrix.python-version }}
  - name: Set up Java ${{ matrix.java-version }}
- uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3
+ uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 # v4.0.0
  with:
  distribution: 'temurin'
  java-version: ${{ matrix.java-version }}

CHANGELOG.md

@@ -27,6 +27,8 @@
 
 ### Development
 
+- ci: update github workflows to use latest version for depricated actions (checkout, setup-python, upload-artifact, download-artifact) #1967 @sjha2048
+
 ### Raw diffs
 - [capa v7.0.1...master](https://github.com/mandiant/capa/compare/v7.0.1...master)
 - [capa-rules v7.0.1...master](https://github.com/mandiant/capa-rules/compare/v7.0.1...master)