Commit cd2bc29 1 parent 12e514c commit cd2bc29 Copy full SHA for cd2bc29
File tree 3 files changed +5
-5
lines changed
3 files changed +5
-5
lines changed Original file line number Diff line number Diff line change 56
56
57
57
# Initializes the CodeQL tools for scanning.
58
58
- name : Initialize CodeQL
59
- uses : github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
59
+ uses : github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
60
60
with :
61
61
languages : ${{ matrix.language }}
62
62
# If you wish to specify custom queries, you can do so here or in a config file.
66
66
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
67
67
# If this step fails, then you should remove it and run the build manually (see below)
68
68
- name : Autobuild
69
- uses : github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
69
+ uses : github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
70
70
71
71
# ℹ️ Command-line programs to run using the OS shell.
72
72
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
79
79
# ./location_of_script_within_repo/buildscript.sh
80
80
81
81
- name : Perform CodeQL Analysis
82
- uses : github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
82
+ uses : github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
83
83
with :
84
84
category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change 89
89
90
90
# Upload the results to GitHub's code scanning dashboard.
91
91
- name : " Upload to code-scanning"
92
- uses : github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
92
+ uses : github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
93
93
with :
94
94
sarif_file : results.sarif
Original file line number Diff line number Diff line change 97
97
TRIVY_PASSWORD : ${{ secrets.GITHUB_TOKEN }}
98
98
99
99
- name : Upload Trivy scan results to GitHub Security tab
100
- uses : github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
100
+ uses : github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
101
101
with :
102
102
sarif_file : " trivy-results.sarif"
You can’t perform that action at this time.
0 commit comments