aboutsummaryrefslogtreecommitdiff
path: root/.github
diff options
context:
space:
mode:
authorGravatar dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 2024-01-29 09:17:56 -0500
committerGravatar GitHub <noreply@github.com> 2024-01-29 09:17:56 -0500
commit8cde3367f656cffcf97cf7890fd5faa2b4aaf212 (patch)
treec55876e47c9ad3ebd1954da0ef29d5bb85a6326f /.github
parent194545b1cb154f0ee0df68124626a5a45a9ef8e8 (diff)
downloadcoredns-8cde3367f656cffcf97cf7890fd5faa2b4aaf212.tar.gz
coredns-8cde3367f656cffcf97cf7890fd5faa2b4aaf212.tar.zst
coredns-8cde3367f656cffcf97cf7890fd5faa2b4aaf212.zip
build(deps): bump github/codeql-action from 3.23.1 to 3.23.2 (#6481)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.23.1 to 3.23.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v3.23.1...v3.23.2) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Diffstat (limited to '.github')
-rw-r--r--.github/workflows/codeql-analysis.yml6
-rw-r--r--.github/workflows/scorecards.yml2
-rw-r--r--.github/workflows/trivy-scan.yaml2
3 files changed, 5 insertions, 5 deletions
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index b92c99187..647931a4c 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -30,12 +30,12 @@ jobs:
uses: actions/checkout@v4
- name: Initialize CodeQL
- uses: github/codeql-action/init@v3.23.1
+ uses: github/codeql-action/init@v3.23.2
with:
languages: ${{ matrix.language }}
- name: Autobuild
- uses: github/codeql-action/autobuild@v3.23.1
+ uses: github/codeql-action/autobuild@v3.23.2
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v3.23.1
+ uses: github/codeql-action/analyze@v3.23.2
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 40c9a87d7..3d1ee7564 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -51,6 +51,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@b96e5e1158e8b8f7694d677976037b27efd275d4
+ uses: github/codeql-action/upload-sarif@25f779c0f271790cfca54f1c5e868acc372ba6f1
with:
sarif_file: results.sarif
diff --git a/.github/workflows/trivy-scan.yaml b/.github/workflows/trivy-scan.yaml
index de34f2030..407b82019 100644
--- a/.github/workflows/trivy-scan.yaml
+++ b/.github/workflows/trivy-scan.yaml
@@ -28,6 +28,6 @@ jobs:
output: 'trivy-results.sarif'
- name: Upload Trivy scan results to GitHub Security tab
- uses: github/codeql-action/upload-sarif@b96e5e1158e8b8f7694d677976037b27efd275d4 # v2.13.4
+ uses: github/codeql-action/upload-sarif@25f779c0f271790cfca54f1c5e868acc372ba6f1 # v2.13.4
with:
sarif_file: 'trivy-results.sarif'