Skip to content

Commit 687e923

Browse files
chore(deps): Bump the development-dependencies group with 2 updates
Bumps the development-dependencies group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `github/codeql-action` from 4.32.4 to 4.32.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@89a39a4...c793b71) Updates `aquasecurity/trivy-action` from 0.34.1 to 0.34.2 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@e368e32...97e0b38) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 7a07d9a commit 687e923

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,9 @@ jobs:
2626
-
2727
# Initializes the CodeQL tools for scanning.
2828
name: Initialize CodeQL
29-
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
29+
uses: github/codeql-action/init@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
3030
with:
3131
languages: ${{ matrix.language }}
3232
-
3333
name: Analyze ${{ matrix.language }}
34-
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
34+
uses: github/codeql-action/analyze@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5

.github/workflows/scanner.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
cache: true
3939
-
4040
name: Vulnerability scan by trivy
41-
uses: aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
41+
uses: aquasecurity/trivy-action@97e0b3872f55f89b95b2f65b3dbab56962816478 # v0.34.2
4242
with:
4343
scan-type: repo
4444
format: sarif
@@ -49,7 +49,7 @@ jobs:
4949
exit-code: 0
5050
-
5151
name: Upload trivy findings to code scanning dashboard
52-
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
52+
uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
5353
with:
5454
category: trivy
5555
sarif_file: trivy-code-report.sarif
@@ -69,7 +69,7 @@ jobs:
6969
output-file: govulnscan-report.sarif
7070
-
7171
name: Upload govulnscan findings to code scanning dashboard
72-
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
72+
uses: github/codeql-action/upload-sarif@c793b717bc78562f491db7b0e93a3a178b099162 # v4.32.5
7373
with:
7474
category: govulnscan
7575
sarif_file: govulnscan-report.sarif

0 commit comments

Comments
 (0)