File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 6262
6363 # Initializes the CodeQL tools for scanning.
6464 - name : Initialize CodeQL
65- uses : github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
65+ uses : github/codeql-action/init@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
6666 with :
6767 languages : ${{ matrix.language }}
6868 build-mode : ${{ matrix.build-mode }}
9090 exit 1
9191
9292 - name : Perform CodeQL Analysis
93- uses : github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
93+ uses : github/codeql-action/analyze@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
9494 with :
9595 category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change 7272 # Upload the results to GitHub's code scanning dashboard (optional).
7373 # Commenting out will disable upload of results to your repo's Code Scanning dashboard
7474 - name : " Upload to code-scanning"
75- uses : github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
75+ uses : github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
7676 with :
7777 sarif_file : results.sarif
Original file line number Diff line number Diff line change 3838 severity : ' CRITICAL'
3939
4040 - name : Upload Trivy scan results to GitHub Security tab
41- uses : github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
41+ uses : github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
4242 with :
4343 sarif_file : ' trivy-results.sarif'
4444
8282
8383 - name : Upload govolncheck results to GitHub Security tab
8484 if : ${{ steps.PrintSarif.outputs.hasResults == 'true' }}
85- uses : github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
85+ uses : github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
8686 with :
8787 sarif_file : govulncheck-results.sarif
You can’t perform that action at this time.
0 commit comments