ci: bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 in the all-github-actions group #1205

	name: 'Cilium Image Versions'
	on:
	workflow_dispatch:
	pull_request:
	types:
	- opened
	- reopened
	- synchronize
	- ready_for_review
	merge_group:
	types:
	- checks_requested

	permissions:
	contents: read

	jobs:
	check:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	fetch-depth: 0
	persist-credentials: false
	- name: Install digest-pinned skopeo shim
	env:
	# Immutable Skopeo release image resolved 2026-08-20.
	# To bump: IMG=quay.io/skopeo/stable:v1.22.2-immutable; echo "${IMG}@$(skopeo inspect docker://${IMG} --format '{{.Digest}}')"
	SKOPEO_IMAGE: quay.io/skopeo/stable:v1.22.2-immutable@sha256:4a16d57b37617a04b3d643079a477a2848efe892dffcdf0ce56df4262b65f810
	run: \|
	mkdir -p "$HOME/.local/bin"
	cat > "$HOME/.local/bin/skopeo" <<EOF
	#!/usr/bin/env bash
	exec docker run --rm --network host "$SKOPEO_IMAGE" "\$@"
	EOF
	chmod +x "$HOME/.local/bin/skopeo"
	echo "$HOME/.local/bin" >> "$GITHUB_PATH"
	- name: Verify skopeo is available
	run: skopeo --version
	- name: Check cilium image versions
	run: \|
	if ! make cilium-versions-check; then
	echo ""
	echo "Newer cilium-family image tags are available on MCR."
	echo "Run 'make cilium-versions' locally and commit the updated hack/aks/deploy.mk."
	exit 1
	fi

Navigation Menu