From a33ab1cde0f88981a5486f169e278cd7486c3731 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Jun 2024 09:38:25 +0000 Subject: [PATCH] Bump github/codeql-action from 2 to 3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yml | 6 +++--- .github/workflows/codeql.yml | 4 ++-- .github/workflows/nightly.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index fc97d3230..0ea6cab9e 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -100,7 +100,7 @@ jobs: failure-threshold: fatal - name: Upload Dockle SARIF Report - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 continue-on-error: true if: ${{ contains(github.ref, 'refs/heads/main') || contains(github.head_ref, 'release/') }} with: @@ -116,7 +116,7 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy SARIF Report - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 continue-on-error: true if: ${{ contains(github.ref, 'refs/heads/main') || contains(github.head_ref, 'release/') }} with: @@ -134,7 +134,7 @@ jobs: acs-report-enable: true - name: Upload Anchore Scan SARIF Report - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 continue-on-error: true if: ${{ contains(github.ref, 'refs/heads/main') || contains(github.head_ref, 'release/') }} with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 0e6791c69..7a19ae4ae 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,7 +55,7 @@ jobs: ${{ runner.os }}-nuget - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: csharp @@ -68,4 +68,4 @@ jobs: working-directory: ./src - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 272a525f9..bc6129410 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -87,7 +87,7 @@ jobs: severity-cutoff: critical - name: Upload Anchore Scan SARIF Report - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 with: sarif_file: ${{ steps.anchore-scan.outputs.sarif }} token: ${{ secrets.GITHUB_TOKEN }}