Merge pull request #188 from wneessen/dependabot/github_actions/github/codeql-action-3.26.2

Bump github/codeql-action from 3.26.0 to 3.26.2
Merge pull request #189 from wneessen/dependabot/docker/golang-c4be4de
2024-11-27 08:05:07 +01:00 · 2024-08-15 09:23:09 +02:00 · 2024-08-15 09:22:51 +02:00 · 2024-08-14 19:28:46 +00:00 · 2024-08-14 19:14:44 +00:00
3 changed files with 4 additions and 4 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -59,7 +59,7 @@ jobs:

    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+      uses: github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@ -86,6 +86,6 @@ jobs:
        /usr/bin/env GOTOOLCHAIN=go1.22.1+auto go build -a -installsuffix cgo -ldflags '-w -s -extldflags "-static"' -o apg github.com/wneessen/apg-go/cmd/apg

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+      uses: github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
      with:
        category: "/language:${{matrix.language}}"
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@ -71,6 +71,6 @@ jobs:

      # Upload the results to GitHub's code scanning dashboard.
      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0
+        uses: github/codeql-action/upload-sarif@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
        with:
          sarif_file: results.sarif
--- a/2
+++ b/2
@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: MIT

-FROM golang:latest@sha256:e4741baa94a913c171ac5398f1ac25af83b766ebdd4b665ff73a55a8c8b3a5d5 AS builder
+FROM golang:latest@sha256:c4be4de3bbe3b7a642b05d9dee30abb3fdd9cd43536df00ebcb33c1fa283eedd AS builder
 RUN mkdir /builddir
 ADD . /builddir/
 WORKDIR /builddir
Author	SHA1	Message	Date
Winni Neessen	1065651188	Merge pull request #188 from wneessen/dependabot/github_actions/github/codeql-action-3.26.2 Bump github/codeql-action from 3.26.0 to 3.26.2	2024-08-15 09:23:09 +02:00
Winni Neessen	8ff4ce1ab5	Merge pull request #189 from wneessen/dependabot/docker/golang-c4be4de Bump golang from `e4741ba` to `c4be4de`	2024-08-15 09:22:51 +02:00
dependabot[bot]	0d80bc6bdc	Bump golang from `e4741ba` to `c4be4de` Bumps golang from `e4741ba` to `c4be4de`. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-08-14 19:28:46 +00:00
dependabot[bot]	9986a80d62	Bump github/codeql-action from 3.26.0 to 3.26.2 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.26.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`eb055d739a...429e197704`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-08-14 19:14:44 +00:00