File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -188,7 +188,7 @@ jobs:
188188 push-to-registry : true
189189 create-storage-record : ${{ startsWith(inputs.registry, 'ghcr.io') }}
190190 - name : Run Trivy Scan
191- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
191+ uses : aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
192192 if : inputs.scan-image
193193 with :
194194 format : sarif
@@ -199,7 +199,7 @@ jobs:
199199 output : ${{ inputs.working-directory }}/trivy_results.sarif
200200 github-pat : ${{ secrets.GITHUB_TOKEN }}
201201 - name : Generate SBOM
202- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
202+ uses : aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
203203 if : inputs.push
204204 with :
205205 format : spdx-json
@@ -238,7 +238,7 @@ jobs:
238238 echo -n "$(cat ./trivy_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
239239 - name : Upload results
240240 if : ${{ inputs.scan-image && inputs.upload-sarif }}
241- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
241+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
242242 with :
243243 sarif_file : ${{ inputs.working-directory }}/trivy_results.sarif
244244 category : container-security
Original file line number Diff line number Diff line change 6161 run : |
6262 echo -n "$(cat ./gosec-results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
6363 - name : Upload results
64- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
64+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
6565 with :
6666 sarif_file : ' ${{ inputs.working-directory }}/gosec-results.sarif'
6767 category : sast
Original file line number Diff line number Diff line change 6464 enable_jobs_summary : true
6565 comments_with_queries : true
6666 - name : Upload SARIF file
67- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
67+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
6868 with :
6969 sarif_file : ${{ inputs.working-directory }}/kics_results.sarif
7070 category : devops
9393 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9494 with :
9595 persist-credentials : false
96- - uses : reviewdog/action-actionlint@e58ee9d111489c31395fbe4857b0be6e7635dbda # v1.70 .0
96+ - uses : reviewdog/action-actionlint@0d952c597ef8459f634d7145b0b044a9699e5e43 # v1.71 .0
9797 continue-on-error : true
9898 with :
9999 fail_level : any
@@ -117,7 +117,7 @@ jobs:
117117 run : |
118118 echo -n "$(cat ./zizmor_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
119119 - name : Upload SARIF file
120- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
120+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
121121 with :
122122 sarif_file : zizmor_results.sarif
123123 category : github-actions
Original file line number Diff line number Diff line change 3131 persist-credentials : false
3232 - name : Get changed files for each workflow and action
3333 id : changed-files
34- uses : tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
34+ uses : tj-actions/changed-files@7dee1b0c1557f278e5c7dc244927139d78c0e22a # v47.0.4
3535 with :
3636 files_yaml : |
3737 cleanup-cache:
Original file line number Diff line number Diff line change @@ -153,7 +153,7 @@ jobs:
153153 run : |
154154 echo -n "$(cat ./clippy-results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=warning -diff="git diff FETCH_HEAD"
155155 - name : Upload results
156- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
156+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
157157 with :
158158 sarif_file : ${{ inputs.working-directory }}/clippy-results.sarif
159159 category : sast
Original file line number Diff line number Diff line change 3131 persist-credentials : false
3232 - name : ' Dependency Review'
3333 if : github.event_name == 'pull_request'
34- uses : actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
34+ uses : actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
3535 with :
3636 fail-on-severity : moderate
3737 comment-summary-in-pr : on-failure
5454 run : |
5555 echo -n "$(cat ./sast-output.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
5656 - name : Upload SARIF file
57- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
57+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
5858 with :
5959 sarif_file : ./sast-output.sarif
6060 category : sast
Original file line number Diff line number Diff line change @@ -101,7 +101,7 @@ jobs:
101101 filter_mode : nofilter
102102
103103 - name : Run Trivy Scan
104- uses : aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
104+ uses : aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
105105 with :
106106 hide-progress : true
107107 format : sarif
@@ -117,7 +117,7 @@ jobs:
117117 run : |
118118 echo -n "$(cat ./trivy_results.sarif)" | reviewdog -reporter=github-check -f=sarif -level=error -diff="git diff FETCH_HEAD"
119119 - name : Upload results
120- uses : github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
120+ uses : github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
121121 with :
122122 sarif_file : ${{ inputs.working-directory }}/trivy_results.sarif
123123 category : devops
You can’t perform that action at this time.
0 commit comments