From 57754aaa2ff69821d82c77e480c5d72bc33fe3e0 Mon Sep 17 00:00:00 2001 From: MCatherine Date: Wed, 10 Jan 2024 16:07:35 -0800 Subject: [PATCH] chore(deps): renovate update (#66) --- .github/workflows/merge-main.yml | 6 +++--- .github/workflows/unit-tests.yml | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/merge-main.yml b/.github/workflows/merge-main.yml index cec4d1f..ff30827 100644 --- a/.github/workflows/merge-main.yml +++ b/.github/workflows/merge-main.yml @@ -25,17 +25,17 @@ jobs: - uses: actions/checkout@v4 - name: Initialize - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: javascript # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 deploys-test: name: TEST Deployments diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml index 975ba19..dd8be88 100644 --- a/.github/workflows/unit-tests.yml +++ b/.github/workflows/unit-tests.yml @@ -55,7 +55,7 @@ jobs: - uses: actions/checkout@v4 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.14.0 + uses: aquasecurity/trivy-action@0.16.1 with: format: "sarif" output: "trivy-results.sarif" @@ -65,6 +65,6 @@ jobs: severity: "CRITICAL,HIGH" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: "trivy-results.sarif"