aboutsummaryrefslogtreecommitdiffstats
path: root/.github
diff options
context:
space:
mode:
authorPaulo Gomes <pjbgf@linux.com>2023-12-19 10:29:34 +0000
committerGitHub <noreply@github.com>2023-12-19 10:29:34 +0000
commitf94b4d24c957207b8607bfbed97e6c0fe28c32cf (patch)
tree2291deafd3a8ee13f0a2a9cb593e07ff561a0648 /.github
parent18f5afa6203f038952dacf9b39855502dddb9bb2 (diff)
parentcc6bf200431e468ae20fbf90b3a8708505693951 (diff)
downloadgo-git-f94b4d24c957207b8607bfbed97e6c0fe28c32cf.tar.gz
Merge pull request #973 from go-git/dependabot/github_actions/github/codeql-action-3
build: bump github/codeql-action from 2 to 3
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/cifuzz.yml2
-rw-r--r--.github/workflows/codeql.yml4
2 files changed, 3 insertions, 3 deletions
diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index 518706f..a930876 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -28,7 +28,7 @@ jobs:
path: ./out/artifacts
- name: Upload Sarif
if: always() && steps.build.outcome == 'success'
- uses: github/codeql-action/upload-sarif@v2
+ uses: github/codeql-action/upload-sarif@v3
with:
# Path to SARIF file relative to the root of the repository
sarif_file: cifuzz-sarif/results.sarif
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index bfe9879..920fc3e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
+ uses: github/codeql-action/init@03e7845b7bfcd5e7fb63d1ae8c61b0e791134fab # v2.22.11
with:
languages: ${{ matrix.language }}
# xref: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
@@ -39,6 +39,6 @@ jobs:
run: go build ./...
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
+ uses: github/codeql-action/analyze@03e7845b7bfcd5e7fb63d1ae8c61b0e791134fab # v2.22.11
with:
category: "/language:${{matrix.language}}"