From 499bcc560279149b410bc126bd19b83ad80b9a38 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 26 Apr 2024 11:14:41 +0000 Subject: [PATCH] Bump github/codeql-action from 2.1.28 to 3.25.3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.28 to 3.25.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cc7986c02bac29104a72998e67239bb5ee2ee110...d39d31e687223d841ef683f52467bd88e9b21c14) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql-analysis.yml | 4 ++-- .github/workflows/docker-linter.yml | 2 +- .github/workflows/openssf-scorecards.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 05be232..0a2dc28 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -54,7 +54,7 @@ jobs: uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 - name: Initialize CodeQL - uses: github/codeql-action/init@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 with: languages: ${{ matrix.language }} # queries: security-extended,security-and-quality # https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs @@ -71,4 +71,4 @@ jobs: run: dotnet build src/EditRelease.sln --configuration Release --no-restore /p:UseSharedCompilation=false - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 diff --git a/.github/workflows/docker-linter.yml b/.github/workflows/docker-linter.yml index a7cf893..adffab9 100644 --- a/.github/workflows/docker-linter.yml +++ b/.github/workflows/docker-linter.yml @@ -49,7 +49,7 @@ jobs: no-fail: true - name: Upload Results - uses: github/codeql-action/upload-sarif@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 with: sarif_file: hadolint-results.sarif wait-for-processing: true diff --git a/.github/workflows/openssf-scorecards.yml b/.github/workflows/openssf-scorecards.yml index 280e7fc..6a56b3b 100644 --- a/.github/workflows/openssf-scorecards.yml +++ b/.github/workflows/openssf-scorecards.yml @@ -56,6 +56,6 @@ jobs: retention-days: 5 - name: Upload to Code-Scanning - uses: github/codeql-action/upload-sarif@cc7986c02bac29104a72998e67239bb5ee2ee110 + uses: github/codeql-action/upload-sarif@d39d31e687223d841ef683f52467bd88e9b21c14 with: sarif_file: results.sarif