Skip to content

Commit f4eb65b

Browse files
bump github/codeql-action from 4.34.1 to 4.35.1
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@3869755...c10b806) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 3810cb2 commit f4eb65b

3 files changed

Lines changed: 6 additions & 6 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,7 @@ jobs:
6262

6363
# Initializes the CodeQL tools for scanning.
6464
- name: Initialize CodeQL
65-
uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
65+
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
6666
with:
6767
languages: ${{ matrix.language }}
6868
build-mode: ${{ matrix.build-mode }}
@@ -90,6 +90,6 @@ jobs:
9090
exit 1
9191
9292
- name: Perform CodeQL Analysis
93-
uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
93+
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
9494
with:
9595
category: "/language:${{matrix.language}}"

.github/workflows/scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,6 +72,6 @@ jobs:
7272
# Upload the results to GitHub's code scanning dashboard (optional).
7373
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
7474
- name: "Upload to code-scanning"
75-
uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
75+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
7676
with:
7777
sarif_file: results.sarif

.github/workflows/security.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
args: --timeout=5m --output.sarif.path=golangci-lint-results.sarif --output.text.path=stdout
3939

4040
- name: Upload golangci-lint results to GitHub Security tab
41-
uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
41+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
4242
with:
4343
sarif_file: golangci-lint-results.sarif
4444

@@ -66,7 +66,7 @@ jobs:
6666
severity: 'CRITICAL,HIGH'
6767

6868
- name: Upload Trivy scan results to GitHub Security tab
69-
uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
69+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
7070
with:
7171
sarif_file: 'trivy-results.sarif'
7272

@@ -106,6 +106,6 @@ jobs:
106106
107107
- name: Upload govulncheck results to Security tab
108108
if: ${{ steps.printSarif.outputs.hasResults == 'true' }}
109-
uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
109+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
110110
with:
111111
sarif_file: govulncheck-results.sarif

0 commit comments

Comments
 (0)