-
-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
⬆️ Updates codacy/codacy-analysis-cli-action action to v4 #366
base: master
Are you sure you want to change the base?
Conversation
Hey! Changelogs info seems to be missing or might be in incorrect format. |
Thanks for the PR! This section of the codebase is owner by https://github.com/AlexRogalskiy/ - if they write a comment saying "LGTM" then it will be merged. |
🏷️ [bumpr] Next version:v2.0.2 Changes:v2.0.1...AlexRogalskiy:renovate/codacy-codacy-analysis-cli-action-4.x |
264e64d
to
543857c
Compare
Pull request by bot. No need to analyze |
543857c
to
1df4ce3
Compare
1df4ce3
to
50d436a
Compare
50d436a
to
053d265
Compare
053d265
to
f09ba43
Compare
f09ba43
to
6eb3826
Compare
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
6eb3826
to
bbc7e1a
Compare
bbc7e1a
to
75ad18e
Compare
@@ -25,7 +25,7 @@ | |||
|
|||
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis | |||
- name: Run Codacy Analysis CLI | |||
uses: codacy/codacy-analysis-cli-action@1.1.0 | |||
uses: codacy/codacy-analysis-cli-action@v4.4.4 |
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
75ad18e
to
5dc9c2a
Compare
@@ -25,7 +25,7 @@ | |||
|
|||
# Execute Codacy Analysis CLI and generate a SARIF output with the security issues identified during the analysis | |||
- name: Run Codacy Analysis CLI | |||
uses: codacy/codacy-analysis-cli-action@1.1.0 | |||
uses: codacy/codacy-analysis-cli-action@v4.4.5 |
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
This PR contains the following updates:
1.1.0
->v4.4.5
Release Notes
codacy/codacy-analysis-cli-action (codacy/codacy-analysis-cli-action)
v4.4.5
Compare Source
What's Changed
v4.4.4
Compare Source
What's Changed
v4.4.3
Compare Source
What's Changed
v4.4.2
Compare Source
What's Changed
vX.X.X
by @lolgab in https://github.com/codacy/codacy-analysis-cli-action/pull/81New Contributors
Full Changelog: codacy/codacy-analysis-cli-action@4.0.2...v4.4.2
v4.4.1
Compare Source
v4.4.0
: Update cli and tool versionsCompare Source
Update versions of:
v4.3.0
: Move tools to artifactCompare Source
v4.2.0
: Add max-tool-memory flagCompare Source
v4.1.0
: Introduce new versioning schemeCompare Source
Now the versions will be published in the form of
v4
,v4.1
andv4.1.0
.v4.0.2
: Allow running Codacy Standalone toolsCompare Source
This release adds support for running Gosec, Clang-tidy, and many more standalone tools from the action.
v4.0.1
: Skip Uncommitted ChangesCompare Source
It's now possible to skip uncommitted changes using the flag
--skip-uncommitted-files-check
v4.0.0
: Parallel mode runs now tools in parallelCompare Source
Parallel mode was not working as intended.
Now it spawns multiple Docker instances based on the parallelism level
v3.0.3
: Fix using the correct commit SHA on pull requestsCompare Source
Actions triggered on pull requests now send the reports for the correct commit SHA
v3.0.2
: Fix staticcheck flow that could change go.mod filesCompare Source
v3.0.1
: Fix standalone toolsCompare Source
Fixes scenario where gosec does not run leading to failure in the next standalone tools.
v3.0.0
: Add support for account API tokensCompare Source
v2.0.1
: Fix SARIF output for tools that returns 0 startLineCompare Source
v2.0.0
: Bump CLI version used in actionCompare Source
Configuration
📅 Schedule: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" in timezone Europe/Moscow, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.