From 77ee555bd121ccb311ae4a6ee0bb8a8e9253075c Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 27 Jan 2025 21:31:18 +0000 Subject: [PATCH] Update github/codeql-action digest to 4e83f6b --- .github/workflows/analyze.yml | 4 ++-- .github/workflows/build.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml index 676fcddd7..cb3df489b 100644 --- a/.github/workflows/analyze.yml +++ b/.github/workflows/analyze.yml @@ -27,7 +27,7 @@ jobs: cache: 'maven' - name: Initialize CodeQL - uses: github/codeql-action/init@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3 + uses: github/codeql-action/init@4e83f6b818d7c9f52143570963b2c7f7f055decb # v3 with: languages: java queries: security-and-quality @@ -36,4 +36,4 @@ jobs: run: make compile - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3 + uses: github/codeql-action/analyze@4e83f6b818d7c9f52143570963b2c7f7f055decb # v3 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index dd2b84857..092fe5a3c 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -148,7 +148,7 @@ jobs: TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db:1,public.ecr.aws/aquasecurity/trivy-java-db:1 - name: Upload Trivy Scan Results to GitHub Security Tab - uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4 # v3 + uses: github/codeql-action/upload-sarif@4e83f6b818d7c9f52143570963b2c7f7f055decb # v3 with: sarif_file: trivy-results.sarif