diff --git a/.github/workflows/codeql-db-upload.yml b/.github/workflows/codeql-db-upload.yml index 918b2ad..8f4ba15 100644 --- a/.github/workflows/codeql-db-upload.yml +++ b/.github/workflows/codeql-db-upload.yml @@ -8,18 +8,18 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout juice-shop codebase - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: path: juice-shop - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: javascript-typescript source-root: juice-shop - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:javascript-typescript" @@ -29,7 +29,7 @@ jobs: cp -r $RUNNER_TEMP/codeql_databases/javascript codeql-db - name: Upload CodeQL database artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: codeql-db path: codeql-db diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d61644a..56f9c08 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,15 +33,15 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: javascript-typescript queries: security-extended - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:javascript-typescript" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 101b5f5..6362207 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Dependency Review uses: actions/dependency-review-action@v4 @@ -41,10 +41,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' @@ -70,10 +70,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'temurin' java-version: '21' diff --git a/.github/workflows/security-pipeline.yml b/.github/workflows/security-pipeline.yml index d8c30fb..3b116d8 100644 --- a/.github/workflows/security-pipeline.yml +++ b/.github/workflows/security-pipeline.yml @@ -46,7 +46,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 @@ -71,10 +71,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: ${{ env.NODE_VERSION }} @@ -94,7 +94,7 @@ jobs: continue-on-error: true - name: Upload Audit Results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 if: always() with: name: npm-audit-results @@ -111,7 +111,7 @@ jobs: image: semgrep/semgrep steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Run Semgrep run: | @@ -129,7 +129,7 @@ jobs: . || true - name: Upload Semgrep Results - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: always() with: sarif_file: semgrep-results.sarif @@ -143,7 +143,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Checkov Scan uses: bridgecrewio/checkov-action@v12 @@ -156,7 +156,7 @@ jobs: skip_check: CKV_AWS_79,CKV_AWS_18 - name: Upload Checkov Results - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: always() with: sarif_file: checkov-results.sarif @@ -171,7 +171,7 @@ jobs: if: github.event_name != 'pull_request' steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Trivy Filesystem Scan uses: aquasecurity/trivy-action@master @@ -184,7 +184,7 @@ jobs: ignore-unfixed: true - name: Upload Trivy Results - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: always() with: sarif_file: trivy-fs-results.sarif