diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index d2381147..4cacaca8 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -45,7 +45,7 @@ jobs: args: '-fmt sarif -out gosec.sarif -exclude-dir=.gomodcache -exclude-dir=.gocache -exclude-dir=.gosrccache -exclude-dir=vendor -no-fail ./...' - name: Upload Gosec Results - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: gosec.sarif if: always() diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 05d3f418..44c6a311 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -26,7 +26,7 @@ jobs: args: '-fmt sarif -out gosec-results.sarif -exclude-dir=.gomodcache -exclude-dir=.gocache -exclude-dir=.gosrccache -exclude-dir=vendor -no-fail ./...' - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: gosec-results.sarif @@ -59,16 +59,16 @@ jobs: - uses: actions/checkout@v4 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: go queries: security-extended,security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v3 + uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 dependency-review: name: Dependency Review @@ -100,6 +100,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: 'trivy-results.sarif'