Skip to content

Commit 4aa8764

Browse files
Bump github/codeql-action from 4.35.2 to 4.35.4
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@95e58e9...68bde55) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 098a2e6 commit 4aa8764

3 files changed

Lines changed: 6 additions & 6 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373

7474
# Initializes the CodeQL tools for scanning.
7575
- name: Initialize CodeQL
76-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
76+
uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
7777
with:
7878
languages: ${{ matrix.language }}
7979
build-mode: ${{ matrix.build-mode }}
@@ -101,6 +101,6 @@ jobs:
101101
exit 1
102102
103103
- name: Perform CodeQL Analysis
104-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
104+
uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
105105
with:
106106
category: "/language:${{matrix.language}}"

.github/workflows/scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,6 @@ jobs:
7676
# Upload the results to GitHub's code scanning dashboard (optional).
7777
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
7878
- name: "Upload to code-scanning"
79-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
79+
uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
8080
with:
8181
sarif_file: results.sarif

.github/workflows/security.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
args: --timeout=5m --output.sarif.path=golangci-lint-results.sarif --output.text.path=stdout
3939

4040
- name: Upload golangci-lint results to GitHub Security tab
41-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
41+
uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
4242
with:
4343
sarif_file: golangci-lint-results.sarif
4444

@@ -66,7 +66,7 @@ jobs:
6666
severity: 'CRITICAL,HIGH'
6767

6868
- name: Upload Trivy scan results to GitHub Security tab
69-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
69+
uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
7070
with:
7171
sarif_file: 'trivy-results.sarif'
7272

@@ -106,6 +106,6 @@ jobs:
106106
107107
- name: Upload govulncheck results to Security tab
108108
if: ${{ steps.printSarif.outputs.hasResults == 'true' }}
109-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
109+
uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
110110
with:
111111
sarif_file: govulncheck-results.sarif

0 commit comments

Comments
 (0)