diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 1cee119..3c8637f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -73,7 +73,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -101,6 +101,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e634ee7..6cc2048 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -38,11 +38,12 @@ jobs: run: | set -euo pipefail + PROJECT_NAME=`go list -m | sed -r 's/(.*\/)*(.+)/\2/'` TAG=`echo "$TAG_NAME" | sed 's/\//-/g'` git archive \ --format=tar.gz \ - --prefix="midgard-src-${TAG}/" \ - --output="midgard-src-${TAG}.tar.gz" \ + --prefix="${PROJECT_NAME}-src-${TAG}/" \ + --output="${PROJECT_NAME}-src-${TAG}.tar.gz" \ "$TAG_NAME" - name: Upload Release (via GitHub CLI) @@ -52,7 +53,9 @@ jobs: shell: bash run: | set -euo pipefail - gh release upload "$TAG_NAME" midgard-src-*.tar.gz --clobber + + PROJECT_NAME=`go list -m | sed -r 's/(.*\/)*(.+)/\2/'` + gh release upload "$TAG_NAME" ${PROJECT_NAME}-src-*.tar.gz --clobber ChecksumReleaseAssets: needs: Build diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 2786b1b..7c5d017 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -76,6 +76,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: sarif_file: results.sarif diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 81be913..d891646 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -38,7 +38,7 @@ jobs: args: --timeout=5m --output.sarif.path=golangci-lint-results.sarif --output.text.path=stdout - name: Upload golangci-lint results to GitHub Security tab - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: sarif_file: golangci-lint-results.sarif @@ -66,7 +66,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: sarif_file: 'trivy-results.sarif' @@ -106,6 +106,6 @@ jobs: - name: Upload govulncheck results to Security tab if: ${{ steps.printSarif.outputs.hasResults == 'true' }} - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: sarif_file: govulncheck-results.sarif