Skip to content

Commit 8738e42

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions group across 1 directory with 4 updates
Bumps the actions group with 4 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/build-push-action](https://github.com/docker/build-push-action) and [openai/codex-action](https://github.com/openai/codex-action). Updates `github/codeql-action` from 4 to 4.36.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v4...v4.36.1) Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@4d04d5d...d7f5e7f) Updates `docker/build-push-action` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@bcafcac...f9f3042) Updates `openai/codex-action` from 1.7 to 1.8 - [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md) - [Commits](openai/codex-action@5c3f4cc...e0fdf01) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: openai/codex-action dependency-version: '1.8' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 1a3ce7c commit 8738e42

11 files changed

Lines changed: 50 additions & 50 deletions

‎.github/workflows/codeql-android-critical-security.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
java-version: "21"
3636

3737
- name: Initialize CodeQL
38-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
38+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
3939
with:
4040
languages: java-kotlin
4141
build-mode: manual
@@ -46,6 +46,6 @@ jobs:
4646
run: ./gradlew --no-daemon :app:assemblePlayDebug
4747

4848
- name: Analyze
49-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
49+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
5050
with:
5151
category: "/codeql-critical-security/android"

‎.github/workflows/codeql-critical-quality.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -342,13 +342,13 @@ jobs:
342342
submodules: false
343343

344344
- name: Initialize CodeQL
345-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
345+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
346346
with:
347347
languages: javascript-typescript
348348
config-file: ./.github/codeql/codeql-core-auth-secrets-critical-quality.yml
349349

350350
- name: Analyze
351-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
351+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
352352
with:
353353
category: "/codeql-critical-quality/core-auth-secrets"
354354

@@ -365,13 +365,13 @@ jobs:
365365
submodules: false
366366

367367
- name: Initialize CodeQL
368-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
368+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
369369
with:
370370
languages: javascript-typescript
371371
config-file: ./.github/codeql/codeql-config-boundary-critical-quality.yml
372372

373373
- name: Analyze
374-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
374+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
375375
with:
376376
category: "/codeql-critical-quality/config-boundary"
377377

@@ -388,13 +388,13 @@ jobs:
388388
submodules: false
389389

390390
- name: Initialize CodeQL
391-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
391+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
392392
with:
393393
languages: javascript-typescript
394394
config-file: ./.github/codeql/codeql-gateway-runtime-boundary-critical-quality.yml
395395

396396
- name: Analyze
397-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
397+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
398398
with:
399399
category: "/codeql-critical-quality/gateway-runtime-boundary"
400400

@@ -411,13 +411,13 @@ jobs:
411411
submodules: false
412412

413413
- name: Initialize CodeQL
414-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
414+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
415415
with:
416416
languages: javascript-typescript
417417
config-file: ./.github/codeql/codeql-channel-runtime-boundary-critical-quality.yml
418418

419419
- name: Analyze
420-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
420+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
421421
with:
422422
category: "/codeql-critical-quality/channel-runtime-boundary"
423423

@@ -460,15 +460,15 @@ jobs:
460460
461461
- name: Initialize CodeQL
462462
if: ${{ github.event_name != 'pull_request' }}
463-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
463+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
464464
with:
465465
languages: javascript-typescript
466466
config-file: ./.github/codeql/codeql-network-runtime-boundary-critical-quality.yml
467467

468468
- name: Analyze
469469
id: analyze
470470
if: ${{ github.event_name != 'pull_request' }}
471-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
471+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
472472
with:
473473
output: sarif-results
474474
category: "/codeql-critical-quality/network-runtime-boundary"
@@ -518,13 +518,13 @@ jobs:
518518
submodules: false
519519

520520
- name: Initialize CodeQL
521-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
521+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
522522
with:
523523
languages: javascript-typescript
524524
config-file: ./.github/codeql/codeql-agent-runtime-boundary-critical-quality.yml
525525

526526
- name: Analyze
527-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
527+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
528528
with:
529529
category: "/codeql-critical-quality/agent-runtime-boundary"
530530

@@ -541,13 +541,13 @@ jobs:
541541
submodules: false
542542

543543
- name: Initialize CodeQL
544-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
544+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
545545
with:
546546
languages: javascript-typescript
547547
config-file: ./.github/codeql/codeql-mcp-process-runtime-boundary-critical-quality.yml
548548

549549
- name: Analyze
550-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
550+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
551551
with:
552552
category: "/codeql-critical-quality/mcp-process-runtime-boundary"
553553

@@ -564,13 +564,13 @@ jobs:
564564
submodules: false
565565

566566
- name: Initialize CodeQL
567-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
567+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
568568
with:
569569
languages: javascript-typescript
570570
config-file: ./.github/codeql/codeql-memory-runtime-boundary-critical-quality.yml
571571

572572
- name: Analyze
573-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
573+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
574574
with:
575575
category: "/codeql-critical-quality/memory-runtime-boundary"
576576

@@ -587,13 +587,13 @@ jobs:
587587
submodules: false
588588

589589
- name: Initialize CodeQL
590-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
590+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
591591
with:
592592
languages: javascript-typescript
593593
config-file: ./.github/codeql/codeql-session-diagnostics-boundary-critical-quality.yml
594594

595595
- name: Analyze
596-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
596+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
597597
with:
598598
category: "/codeql-critical-quality/session-diagnostics-boundary"
599599

@@ -610,13 +610,13 @@ jobs:
610610
submodules: false
611611

612612
- name: Initialize CodeQL
613-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
613+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
614614
with:
615615
languages: javascript-typescript
616616
config-file: ./.github/codeql/codeql-plugin-sdk-reply-runtime-critical-quality.yml
617617

618618
- name: Analyze
619-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
619+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
620620
with:
621621
category: "/codeql-critical-quality/plugin-sdk-reply-runtime"
622622

@@ -633,13 +633,13 @@ jobs:
633633
submodules: false
634634

635635
- name: Initialize CodeQL
636-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
636+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
637637
with:
638638
languages: javascript-typescript
639639
config-file: ./.github/codeql/codeql-provider-runtime-boundary-critical-quality.yml
640640

641641
- name: Analyze
642-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
642+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
643643
with:
644644
category: "/codeql-critical-quality/provider-runtime-boundary"
645645

@@ -655,13 +655,13 @@ jobs:
655655
submodules: false
656656

657657
- name: Initialize CodeQL
658-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
658+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
659659
with:
660660
languages: javascript-typescript
661661
config-file: ./.github/codeql/codeql-ui-control-plane-critical-quality.yml
662662

663663
- name: Analyze
664-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
664+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
665665
with:
666666
category: "/codeql-critical-quality/ui-control-plane"
667667

@@ -677,13 +677,13 @@ jobs:
677677
submodules: false
678678

679679
- name: Initialize CodeQL
680-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
680+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
681681
with:
682682
languages: javascript-typescript
683683
config-file: ./.github/codeql/codeql-web-media-runtime-boundary-critical-quality.yml
684684

685685
- name: Analyze
686-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
686+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
687687
with:
688688
category: "/codeql-critical-quality/web-media-runtime-boundary"
689689

@@ -700,13 +700,13 @@ jobs:
700700
submodules: false
701701

702702
- name: Initialize CodeQL
703-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
703+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
704704
with:
705705
languages: javascript-typescript
706706
config-file: ./.github/codeql/codeql-plugin-boundary-critical-quality.yml
707707

708708
- name: Analyze
709-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
709+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
710710
with:
711711
category: "/codeql-critical-quality/plugin-boundary"
712712

@@ -723,12 +723,12 @@ jobs:
723723
submodules: false
724724

725725
- name: Initialize CodeQL
726-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
726+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
727727
with:
728728
languages: javascript-typescript
729729
config-file: ./.github/codeql/codeql-plugin-sdk-package-contract-critical-quality.yml
730730

731731
- name: Analyze
732-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
732+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
733733
with:
734734
category: "/codeql-critical-quality/plugin-sdk-package-contract"

‎.github/workflows/codeql-macos-critical-security.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
swift --version
3636
3737
- name: Initialize CodeQL
38-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
38+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
3939
with:
4040
languages: swift
4141
build-mode: manual
@@ -46,7 +46,7 @@ jobs:
4646

4747
- name: Analyze
4848
id: analyze
49-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
49+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
5050
with:
5151
output: sarif-results
5252
upload: failure-only
@@ -83,7 +83,7 @@ jobs:
8383
done
8484
8585
- name: Upload filtered SARIF
86-
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
86+
uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
8787
with:
8888
sarif_file: sarif-results-filtered
8989
category: "/codeql-critical-security/macos"

‎.github/workflows/codeql.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -101,12 +101,12 @@ jobs:
101101
.github/codeql
102102
103103
- name: Initialize CodeQL
104-
uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
104+
uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
105105
with:
106106
languages: ${{ matrix.language }}
107107
config-file: ${{ matrix.config_file }}
108108

109109
- name: Analyze
110-
uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
110+
uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4
111111
with:
112112
category: "/codeql-security-high/${{ matrix.category }}"

‎.github/workflows/docker-release.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ jobs:
8989
fetch-depth: 0
9090

9191
- name: Set up Docker Builder
92-
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
92+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
9393

9494
- name: Login to GitHub Container Registry
9595
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
@@ -161,7 +161,7 @@ jobs:
161161
- name: Build and push amd64 image
162162
id: build
163163
# WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY.
164-
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
164+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
165165
with:
166166
context: .
167167
platforms: linux/amd64
@@ -179,7 +179,7 @@ jobs:
179179
id: build-browser
180180
if: steps.tags.outputs.browser != ''
181181
# WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY.
182-
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
182+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
183183
with:
184184
context: .
185185
platforms: linux/amd64
@@ -280,7 +280,7 @@ jobs:
280280
fetch-depth: 0
281281

282282
- name: Set up Docker Builder
283-
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
283+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
284284

285285
- name: Login to GitHub Container Registry
286286
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
@@ -352,7 +352,7 @@ jobs:
352352
- name: Build and push arm64 image
353353
id: build
354354
# WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY.
355-
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
355+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
356356
with:
357357
context: .
358358
platforms: linux/arm64
@@ -370,7 +370,7 @@ jobs:
370370
id: build-browser
371371
if: steps.tags.outputs.browser != ''
372372
# WARNING: KEEP THE OFFICIAL DOCKER ACTION HERE; DO NOT SWITCH THIS BACK TO BLACKSMITH BLINDLY.
373-
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
373+
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
374374
with:
375375
context: .
376376
platforms: linux/arm64
@@ -562,7 +562,7 @@ jobs:
562562
fetch-depth: 1
563563

564564
- name: Set up Docker Builder
565-
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
565+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
566566

567567
- name: Login to GitHub Container Registry
568568
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4

‎.github/workflows/docs-agent.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,7 @@ jobs:
149149
150150
- name: Run Codex docs agent
151151
if: steps.gate.outputs.run_agent == 'true'
152-
uses: openai/codex-action@5c3f4ccdb2b8790f73d6b21751ac00e602aa0c02
152+
uses: openai/codex-action@e0fdf01220eb9a88167c4898839d273e3f2609d1
153153
env:
154154
DOCS_AGENT_BASE_SHA: ${{ steps.gate.outputs.review_base_sha }}
155155
DOCS_AGENT_HEAD_SHA: ${{ steps.gate.outputs.review_head_sha }}

‎.github/workflows/mantis-telegram-desktop-proof.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -445,7 +445,7 @@ jobs:
445445
sudo chown -R codex:codex "$GITHUB_WORKSPACE"
446446
447447
- name: Run Codex Mantis Telegram agent
448-
uses: openai/codex-action@5c3f4ccdb2b8790f73d6b21751ac00e602aa0c02
448+
uses: openai/codex-action@e0fdf01220eb9a88167c4898839d273e3f2609d1
449449
env:
450450
BASELINE_REF: ${{ needs.resolve_request.outputs.baseline_ref }}
451451
BASELINE_SHA: ${{ needs.validate_refs.outputs.baseline_revision }}

‎.github/workflows/opengrep-precise-full.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
scripts/run-opengrep.sh --sarif --error
5454
5555
- name: Upload SARIF to GitHub Code Scanning
56-
uses: github/codeql-action/upload-sarif@v4
56+
uses: github/codeql-action/upload-sarif@v4.36.1
5757
# Only upload if the scan actually produced a SARIF file.
5858
if: always() && hashFiles('.opengrep-out/precise.sarif') != ''
5959
with:

‎.github/workflows/opengrep-precise.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,7 @@ jobs:
8484
scripts/run-opengrep.sh --changed --sarif --error
8585
8686
- name: Upload SARIF to GitHub Code Scanning
87-
uses: github/codeql-action/upload-sarif@v4
87+
uses: github/codeql-action/upload-sarif@v4.36.1
8888
# Only upload if the scan actually produced a SARIF file.
8989
if: always() && hashFiles('.opengrep-out/precise.sarif') != ''
9090
with:

0 commit comments

Comments
 (0)