From c4421727158fd35ee19bb8003a720a6764d4bd09 Mon Sep 17 00:00:00 2001
From: rhtenhove <rhtenhove@users.noreply.github.com>
Date: Thu, 12 May 2022 17:27:39 -0400
Subject: [PATCH] pin image version (#504)

* pin image version to job

* change docker tag format

* update semver GA
---
 .github/workflows/publish.yml | 2 +-
 job.yaml                      | 6 ++++--
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 54b4bce..747f8cd 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -39,7 +39,7 @@ jobs:
           password: ${{ secrets.ECR_SECRET_ACCESS_KEY }}
       - name: Get version
         id: get_version
-        uses: crazy-max/ghaction-docker-meta@v1
+        uses: crazy-max/ghaction-docker-meta@v3
         with:
           images: ${{ env.REP }}
           tag-semver: |
diff --git a/job.yaml b/job.yaml
index 2d9e50f..84ce485 100644
--- a/job.yaml
+++ b/job.yaml
@@ -5,11 +5,13 @@ metadata:
   name: kube-hunter
 spec:
   template:
+    metadata:
+      labels:
+        app: kube-hunter
     spec:
       containers:
         - name: kube-hunter
-          image: aquasec/kube-hunter
+          image: aquasec/kube-hunter:v0.6.7
           command: ["kube-hunter"]
           args: ["--pod"]
       restartPolicy: Never
-  backoffLimit: 4