Merge pull request #232 from wneessen/dependabot/github_actions/github/codeql-action-3.27.3

Bump github/codeql-action from 3.27.1 to 3.27.3
Merge pull request #231 from wneessen/dependabot/github_actions/sonarsource/sonarqube-scan-action-4.0.0
2024-11-21 13:20:50 +01:00 · 2024-11-12 22:53:57 +01:00 · 2024-11-12 22:53:48 +01:00 · 2024-11-12 22:53:27 +01:00 · 2024-11-12 20:03:00 +00:00 · 2024-11-12 20:02:49 +00:00
4 changed files with 5 additions and 5 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -59,7 +59,7 @@ jobs:

    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+      uses: github/codeql-action/init@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@ -86,6 +86,6 @@ jobs:
        /usr/bin/env GOTOOLCHAIN=go1.22.1+auto go build -a -installsuffix cgo -ldflags '-w -s -extldflags "-static"' -o apg github.com/wneessen/apg-go/cmd/apg

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+      uses: github/codeql-action/analyze@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
      with:
        category: "/language:${{matrix.language}}"
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@ -71,6 +71,6 @@ jobs:

      # Upload the results to GitHub's code scanning dashboard.
      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@4f3212b61783c3c68e8309a0f18a699764811cda # v3.27.1
+        uses: github/codeql-action/upload-sarif@396bb3e45325a47dd9ef434068033c6d5bb0d11a # v3.27.3
        with:
          sarif_file: results.sarif
--- a/.github/workflows/sonarqube.yml
+++ b/.github/workflows/sonarqube.yml
@ -21,7 +21,7 @@ jobs:
      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
        with:
          fetch-depth: 0
-      - uses: sonarsource/sonarqube-scan-action@13990a695682794b53148ff9f6a8b6e22e43955e # master
+      - uses: sonarsource/sonarqube-scan-action@94d4f8ac4aaefccd7fb84bff00b0aeb2d65fcd49 # master
        env:
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
          SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
--- a/2
+++ b/2
@ -2,7 +2,7 @@
 #
 # SPDX-License-Identifier: MIT

-FROM golang:latest@sha256:d56c3e08fe5b27729ee3834854ae8f7015af48fd651cd25d1e3bcf3c19830174 AS builder
+FROM golang:latest@sha256:8956c08c8129598db36e92680d6afda0079b6b32b93c2c08260bf6fa75524e07 AS builder
 RUN mkdir /builddir
 ADD . /builddir/
 WORKDIR /builddir
Author	SHA1	Message	Date
Winni Neessen	b91a079125	Merge pull request #232 from wneessen/dependabot/github_actions/github/codeql-action-3.27.3 Bump github/codeql-action from 3.27.1 to 3.27.3	2024-11-12 22:53:57 +01:00
Winni Neessen	bdd68a29cf	Merge pull request #231 from wneessen/dependabot/github_actions/sonarsource/sonarqube-scan-action-4.0.0 Bump sonarsource/sonarqube-scan-action from 3.1.0 to 4.0.0	2024-11-12 22:53:48 +01:00
Winni Neessen	05690196dc	Merge pull request #230 from wneessen/dependabot/docker/golang-8956c08 Bump golang from `d56c3e0` to `8956c08`	2024-11-12 22:53:27 +01:00
dependabot[bot]	c253f4ca1e	Bump github/codeql-action from 3.27.1 to 3.27.3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.1 to 3.27.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`4f3212b617...396bb3e453`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-11-12 20:03:00 +00:00
dependabot[bot]	d093f4cbf5	Bump sonarsource/sonarqube-scan-action from 3.1.0 to 4.0.0 Bumps [sonarsource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 3.1.0 to 4.0.0. - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](`13990a6956...94d4f8ac4a`) --- updated-dependencies: - dependency-name: sonarsource/sonarqube-scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2024-11-12 20:02:49 +00:00
dependabot[bot]	288a5c7a17	Bump golang from `d56c3e0` to `8956c08` Bumps golang from `d56c3e0` to `8956c08`. --- updated-dependencies: - dependency-name: golang dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2024-11-12 19:45:13 +00:00