From 52253dfc8637b48ffc6fc109c1febe057bb39cd5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 Mar 2024 10:49:10 +0000 Subject: [PATCH] chore(deps): Bump github/codeql-action from 3.24.1 to 3.24.8 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.1 to 3.24.8. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e675ced7a7522a761fc9c8eb26682c8b27c42b2b...05963f47d870e2cb19a537396c1f668a348c7d8f) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/module.codeql.yml | 6 +++--- .github/workflows/module.detekt.yml | 2 +- .github/workflows/module.scorecards.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/module.codeql.yml b/.github/workflows/module.codeql.yml index 1748c43..da7e6a2 100644 --- a/.github/workflows/module.codeql.yml +++ b/.github/workflows/module.codeql.yml @@ -53,12 +53,12 @@ jobs: key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }} restore-keys: ${{ runner.os }}-gradle - name: "Setup: Initialize CodeQL" - uses: github/codeql-action/init@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1 + uses: github/codeql-action/init@05963f47d870e2cb19a537396c1f668a348c7d8f # v3.24.8 with: languages: java-kotlin - name: "CodeQL: Autobuild" - uses: github/codeql-action/autobuild@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1 + uses: github/codeql-action/autobuild@05963f47d870e2cb19a537396c1f668a348c7d8f # v3.24.8 - name: "CodeQL: Analysis" - uses: github/codeql-action/analyze@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1 + uses: github/codeql-action/analyze@05963f47d870e2cb19a537396c1f668a348c7d8f # v3.24.8 with: category: "/language:java-kotlin" diff --git a/.github/workflows/module.detekt.yml b/.github/workflows/module.detekt.yml index 76428b3..8d2ae0d 100644 --- a/.github/workflows/module.detekt.yml +++ b/.github/workflows/module.detekt.yml @@ -78,7 +78,7 @@ jobs: )" > ${{ github.workspace }}/detekt.sarif.json # Uploads results to GitHub repository using the upload-sarif action - name: "Report: Upload SARIF" - uses: github/codeql-action/upload-sarif@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1 + uses: github/codeql-action/upload-sarif@05963f47d870e2cb19a537396c1f668a348c7d8f # v3.24.8 with: # Path to SARIF file relative to the root of the repository sarif_file: ${{ github.workspace }}/detekt.sarif.json diff --git a/.github/workflows/module.scorecards.yml b/.github/workflows/module.scorecards.yml index 9af7b3d..2fd91da 100644 --- a/.github/workflows/module.scorecards.yml +++ b/.github/workflows/module.scorecards.yml @@ -60,6 +60,6 @@ jobs: path: results.sarif retention-days: 5 - name: "Reporting: Upload SARIF" - uses: github/codeql-action/upload-sarif@e675ced7a7522a761fc9c8eb26682c8b27c42b2b # v3.24.1 + uses: github/codeql-action/upload-sarif@05963f47d870e2cb19a537396c1f668a348c7d8f # v3.24.8 with: sarif_file: results.sarif