Merge pull request #27 from wneessen/dependabot/github_actions/github/codeql-action-3.26.10

Bump github/codeql-action from 3.26.9 to 3.26.10
2024-10-05 17:25:56 +02:00 · 2024-10-01 06:47:25 +02:00 · 2024-10-01 00:29:10 +00:00
2 changed files with 4 additions and 4 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@ -43,7 +43,7 @@ jobs:

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
-        uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/init@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
        with:
          languages: ${{ matrix.language }}
          # If you wish to specify custom queries, you can do so here or in a config file.
@ -53,7 +53,7 @@ jobs:
      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      - name: Autobuild
-        uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/autobuild@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@ -66,6 +66,6 @@ jobs:
      #   ./location_of_script_within_repo/buildscript.sh

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/analyze@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
        with:
          category: "/language:${{matrix.language}}"
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@ -75,6 +75,6 @@ jobs:

      # Upload the results to GitHub's code scanning dashboard.
      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@461ef6c76dfe95d5c364de2f431ddbd31a417628 # v3.26.9
+        uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
        with:
          sarif_file: results.sarif
Author	SHA1	Message	Date
Winni Neessen	66e76792bf	Merge pull request #27 from wneessen/dependabot/github_actions/github/codeql-action-3.26.10 Some checks failed CodeQL / Analyze (push) Failing after 2s Details golangci-lint / lint (push) Failing after 2s Details Govulncheck Security Scan / test (push) Failing after 2s Details REUSE Compliance Check / test (push) Failing after 2s Details Scorecard supply-chain security / Scorecard analysis (push) Failing after 2s Details SonarQube / Build and analyze (push) Failing after 2s Details Bump github/codeql-action from 3.26.9 to 3.26.10	2024-10-01 06:47:25 +02:00
dependabot[bot]	590afd0176	Bump github/codeql-action from 3.26.9 to 3.26.10 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.9 to 3.26.10. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`461ef6c76d...e2b3eafc8d`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-10-01 00:29:10 +00:00