Merge branch 'develop' into main

.github/workflows/pipeline.yaml

@@ -69,15 +69,15 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           # We need all Git history for testing credentials
           fetch-depth: 0
           # Ensure all submodules up-to-date
           submodules: recursive
 
       - name: SAST - Credentials
-        uses: trufflesecurity/trufflehog@v3.33.0
+        uses: trufflesecurity/trufflehog@v3.40.0
         with:
           base: ${{ github.event.repository.default_branch }}
           head: HEAD
@@ -92,7 +92,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           # We need all Git history for "version.sh"
           fetch-depth: 0
@@ -168,7 +168,7 @@ jobs:
               snyk.sarif
 
       - name: Upload results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v2.2.12
+        uses: github/codeql-action/upload-sarif@v2.20.0
         with:
           sarif_file: merged.sarif
 
@@ -183,7 +183,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           # Chart Releaser needs to have local access to "gh-pages" plus current branch
           fetch-depth: 0
@@ -212,7 +212,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
 
       # Required for running "npx" CLI
       - name: Setup Node
@@ -253,7 +253,7 @@ jobs:
             arch: linux/amd64,linux/arm64
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           # We need all Git history for "version.sh"
           fetch-depth: 0
@@ -315,7 +315,7 @@ jobs:
 
       - name: Container meta
         id: meta
-        uses: docker/metadata-action@v4.4.0
+        uses: docker/metadata-action@v4.6.0
         with:
           images: |
             ${{ env.CONTAINER_REGISTRY_GHCR }}/${{ env.CONTAINER_NAME }}
@@ -349,7 +349,7 @@ jobs:
           echo "tag=$tag" >> $GITHUB_OUTPUT
 
       - name: Build & push container
-        uses: docker/build-push-action@v4.0.0
+        uses: docker/build-push-action@v4.1.1
         with:
           build-args: |
             AWS_CLI_VERSION=${{ env.AWS_CLI_VERSION }}
@@ -407,7 +407,7 @@ jobs:
               snyk-*.sarif
 
       - name: Upload results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v2.2.12
+        uses: github/codeql-action/upload-sarif@v2.20.0
         with:
           sarif_file: merged.sarif
 
@@ -428,7 +428,7 @@ jobs:
             runs-on: windows-2019
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
         with:
           # We need all Git history for "version.sh"
           fetch-depth: 0
@@ -471,7 +471,7 @@ jobs:
 
       - name: Container meta
         id: meta
-        uses: docker/metadata-action@v4.4.0
+        uses: docker/metadata-action@v4.6.0
         with:
           images: |
             ${{ env.CONTAINER_REGISTRY_GHCR }}/${{ env.CONTAINER_NAME }}
@@ -578,7 +578,7 @@ jobs:
             ${{ steps.tag.outputs.tag }}
 
       - name: Upload results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v2.2.12
+        uses: github/codeql-action/upload-sarif@v2.20.0
         with:
           sarif_file: snyk.sarif
 
@@ -589,7 +589,7 @@ jobs:
       image: returntocorp/semgrep
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
 
       - name: Run tests
         # Semgrep can be used to break the build when it detects security issues. In this case we want to upload the issues to GitHub Security
@@ -599,7 +599,7 @@ jobs:
         run: semgrep ci --sarif --output=semgrep.sarif
 
       - name: Upload results to GitHub Security
-        uses: github/codeql-action/upload-sarif@v2.2.12
+        uses: github/codeql-action/upload-sarif@v2.20.0
         with:
           sarif_file: semgrep.sarif
 
@@ -610,13 +610,27 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/[email protected].2
+        uses: actions/[email protected].3
 
       - name: Setup ORAS
         uses: oras-project/[email protected]
         with:
           version: ${{ env.ORAS_VERSION }}
 
+      - name: Login to registry - GitHub
+        uses: docker/[email protected]
+        with:
+          registry: ${{ env.CONTAINER_REGISTRY_GHCR }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Login to registry - Docker Hub
+        uses: docker/[email protected]
+        with:
+          registry: ${{ env.CONTAINER_REGISTRY_DOCKER_HUB }}
+          username: clemlesne
+          password: ${{ secrets.DOCKER_HUB_PAT }}
+
       - name: Push to registry
         run: |
           oras push \