Skip to content

Commit

Permalink
chore: bump github/codeql-action from 3.25.7 to 3.25.8
Browse files Browse the repository at this point in the history
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.7 to 3.25.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f079b84...2e230e8)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
  • Loading branch information
dependabot[bot] authored Jun 10, 2024
1 parent 2a378d7 commit 17f9c1a
Show file tree
Hide file tree
Showing 4 changed files with 9 additions and 9 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/scorecards.yml
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,6 @@ jobs:

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f # tag=v3.25.7
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # tag=v3.25.8
with:
sarif_file: results.sarif
10 changes: 5 additions & 5 deletions .github/workflows/test-checks.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
ignore-unfixed: false
severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
sarif_file: 'trivy-results.sarif'

Expand All @@ -61,13 +61,13 @@ jobs:
- name: Checkout repository
uses: actions/checkout@v4
- name: Initialize CodeQL
uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
languages: ${{ matrix.language }}
- name: Autobuild
uses: github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/autobuild@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff

cocogitto:
runs-on: ubuntu-latest
Expand All @@ -92,7 +92,7 @@ jobs:
- uses: actions/checkout@v4
- run: ./.bin/install-gitleaks-linux-x64.sh
- run: ./gitleaks detect --exit-code 0 --report-format sarif --report-path "gitleaks.sarif"
- uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f
- uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
sarif_file: 'gitleaks.sarif'

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test-code.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ jobs:
fs.writeFileSync('results.sarif', JSON.stringify(sarifJson, null, 2));
EOF
working-directory: ./app
- uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f
- uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
sarif_file: app/results.sarif

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/test-containers.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:
severity: CRITICAL
timeout: 10m0s
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
sarif_file: 'trivy-results.sarif'
- name: Get Results Length From Sarif
Expand All @@ -64,7 +64,7 @@ jobs:
severity: CRITICAL
timeout: 10m0s
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f
uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff
with:
sarif_file: 'trivy-results.sarif'
- name: Get Results Length From Sarif
Expand Down

0 comments on commit 17f9c1a

Please sign in to comment.