Skip to content

Commit 56c1c05

Browse files
dependabot[bot]dependabot[bot]
authored
chore(ci): bump the ci-deps group across 1 directory with 8 updates (#686)
Bumps the ci-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.10.4` | `2.11.0` | | [actions/cache](https://github.com/actions/cache) | `4.2.0` | `4.2.2` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.0` | `4.6.1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `4.1.9` | | [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) | `2.0.0` | `2.1.0` | | [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.4` | `2.0.10` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.0` | `2.4.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.8` | `3.28.10` | Updates `step-security/harden-runner` from 2.10.4 to 2.11.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@cb605e5...4d991eb) Updates `actions/cache` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@1bd1e32...d4323d4) Updates `actions/upload-artifact` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@65c4c4a...4cec3d8) Updates `actions/download-artifact` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@fa0a91b...cc20338) Updates `slsa-framework/slsa-github-generator` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](slsa-framework/slsa-github-generator@v2.0.0...v2.1.0) Updates `EmbarkStudios/cargo-deny-action` from 2.0.4 to 2.0.10 - [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases) - [Commits](EmbarkStudios/cargo-deny-action@e2f4ede...4de59db) Updates `ossf/scorecard-action` from 2.4.0 to 2.4.1 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@62b2cac...f49aabe) Updates `github/codeql-action` from 3.28.8 to 3.28.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@dd74661...b56ba49) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-deps - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps - dependency-name: slsa-framework/slsa-github-generator dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci-deps - dependency-name: EmbarkStudios/cargo-deny-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci-deps ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent afb455f commit 56c1c05

14 files changed

+49
-49
lines changed

‎.github/workflows/benchmarks.yml

+6-6
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
21+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2222
with:
2323
egress-policy: audit
2424

@@ -34,7 +34,7 @@ jobs:
3434
java-version: 17
3535
- name: Cache restore
3636
id: cache-restore
37-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
37+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
3838
with:
3939
path: |
4040
~/.cargo/bin/
@@ -56,7 +56,7 @@ jobs:
5656
runs-on: ubuntu-latest
5757
steps:
5858
- name: Harden Runner
59-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
59+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
6060
with:
6161
egress-policy: audit
6262

@@ -72,7 +72,7 @@ jobs:
7272
java-version: 17
7373
- name: Cache restore
7474
id: cache-restore
75-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
75+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
7676
with:
7777
path: |
7878
~/.cargo/bin/
@@ -101,7 +101,7 @@ jobs:
101101
runs-on: ubuntu-latest
102102
steps:
103103
- name: Harden Runner
104-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
104+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
105105
with:
106106
egress-policy: audit
107107

@@ -117,7 +117,7 @@ jobs:
117117
java-version: 17
118118
- name: Cache restore
119119
id: cache-restore
120-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
120+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
121121
with:
122122
path: |
123123
~/.cargo/bin/

‎.github/workflows/book.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Harden Runner
33-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
33+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
3434
with:
3535
disable-sudo: true
3636
egress-policy: block
@@ -55,7 +55,7 @@ jobs:
5555
run: rustup override set stable
5656
- name: Cache restore (Cargo)
5757
id: cache-restore-cargo
58-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
58+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
5959
with:
6060
path: |
6161
~/.cargo/bin/

‎.github/workflows/closed-issue.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
issues: write
1414
steps:
1515
- name: Harden Runner
16-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
16+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1717
with:
1818
disable-sudo: true
1919
egress-policy: block

‎.github/workflows/clusterfuzzlite-batch.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- address
2424
steps:
2525
- name: Harden Runner
26-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
26+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2727
with:
2828
disable-sudo: true
2929
egress-policy: block
@@ -64,7 +64,7 @@ jobs:
6464
if: ${{ always() && needs.BatchFuzzing.result == 'failure' }}
6565
steps:
6666
- name: Harden Runner
67-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
67+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
6868
with:
6969
egress-policy: audit
7070
- name: Checkout sources

‎.github/workflows/clusterfuzzlite-cron.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- name: Harden Runner
16-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
16+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1717
with:
1818
disable-sudo: true
1919
egress-policy: block
@@ -49,7 +49,7 @@ jobs:
4949
runs-on: ubuntu-latest
5050
steps:
5151
- name: Harden Runner
52-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
52+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
5353
with:
5454
egress-policy: audit
5555

‎.github/workflows/clusterfuzzlite-pr.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- address
2424
steps:
2525
- name: Harden Runner
26-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
26+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2727
with:
2828
disable-sudo: true
2929
egress-policy: block

‎.github/workflows/dependency-review.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
20+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2121
with:
2222
disable-sudo: true
2323
egress-policy: block

‎.github/workflows/new-issue.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
repository-projects: write
1515
steps:
1616
- name: Harden Runner
17-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
17+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1818
with:
1919
egress-policy: audit
2020

‎.github/workflows/nix-shell.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- name: Harden Runner
16-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
16+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1717
with:
1818
egress-policy: block
1919
allowed-endpoints: >

‎.github/workflows/release.yml

+9-9
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Harden Runner
23-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
23+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2424
with:
2525
egress-policy: audit
2626

@@ -87,7 +87,7 @@ jobs:
8787
rustflags: "-C link-arg=-fuse-ld=lld --deny warnings"
8888
steps:
8989
- name: Harden Runner
90-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
90+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
9191
with:
9292
egress-policy: audit
9393

@@ -97,7 +97,7 @@ jobs:
9797
- name: Cache restore (MinGW)
9898
id: cache-restore-mingw
9999
if: matrix.needs-mingw != ''
100-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
100+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
101101
with:
102102
path: |
103103
C:\ProgramData\chocolatey\lib\mingw
@@ -127,7 +127,7 @@ jobs:
127127
run: rustup override set stable
128128
- name: Cache restore
129129
id: cache-restore-cargo
130-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
130+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
131131
with:
132132
path: |
133133
~/.cargo/bin/
@@ -147,7 +147,7 @@ jobs:
147147
if: matrix.os == 'windows-latest'
148148
run: mv -Force "target/${{ matrix.target_triple }}/distribution/rq.exe" target/distribution/rq-${{ matrix.target_triple }}.exe
149149
- name: Upload the binary as artifact
150-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
150+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
151151
with:
152152
name: rq-${{ matrix.target_triple }}
153153
# The * matches .exe if on windows and nothing otherwise.
@@ -164,12 +164,12 @@ jobs:
164164
contents: write
165165
steps:
166166
- name: Harden Runner
167-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
167+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
168168
with:
169169
egress-policy: audit
170170

171171
- name: Download artifacts from build
172-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
172+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
173173
with:
174174
path: release/
175175
- name: Generate provenance subjects
@@ -189,7 +189,7 @@ jobs:
189189

190190
provenance:
191191
needs: [github-release]
192-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
192+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
193193
permissions:
194194
actions: read
195195
id-token: write
@@ -206,7 +206,7 @@ jobs:
206206
runs-on: ubuntu-latest
207207
steps:
208208
- name: Harden Runner
209-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
209+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
210210
with:
211211
egress-policy: audit
212212

‎.github/workflows/rust.yml

+15-15
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ jobs:
7676
rustflags: "-C link-arg=-fuse-ld=lld --deny warnings"
7777
steps:
7878
- name: Harden Runner
79-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
79+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
8080
with:
8181
egress-policy: block
8282
allowed-endpoints: >
@@ -95,7 +95,7 @@ jobs:
9595
- name: Cache restore (MinGW)
9696
id: cache-restore-mingw
9797
if: matrix.needs-mingw != ''
98-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
98+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
9999
with:
100100
path: |
101101
C:\ProgramData\chocolatey\lib\mingw
@@ -128,7 +128,7 @@ jobs:
128128
run: rustup override set ${{ matrix.toolchain }}
129129
- name: Cache restore (Cargo)
130130
id: cache-restore-cargo
131-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
131+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
132132
with:
133133
path: |
134134
~/.cargo/bin/
@@ -149,7 +149,7 @@ jobs:
149149
env:
150150
RUSTFLAGS: ${{ matrix.rustflags }}
151151
- name: Download rsonpath-test artifact
152-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
152+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
153153
with:
154154
name: ${{ needs.test-gen.outputs.artifact-name }}
155155
path: ${{ needs.test-gen.outputs.artifact-path }}
@@ -181,7 +181,7 @@ jobs:
181181
- nosimd;slow_quotes;slow_popcnt
182182
steps:
183183
- name: Harden Runner
184-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
184+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
185185
with:
186186
egress-policy: audit
187187

@@ -198,7 +198,7 @@ jobs:
198198
target: ${{ matrix.target_triple }}
199199
- name: Cache restore (Cargo)
200200
id: cache-restore-cargo
201-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
201+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
202202
with:
203203
path: |
204204
~/.cargo/bin/
@@ -212,7 +212,7 @@ jobs:
212212
env:
213213
RUSTFLAGS: "-C link-arg=-fuse-ld=lld --deny warnings"
214214
- name: Download rsonpath-test artifact
215-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
215+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
216216
with:
217217
name: ${{ needs.test-gen.outputs.artifact-name }}
218218
path: ${{ needs.test-gen.outputs.artifact-path }}
@@ -235,7 +235,7 @@ jobs:
235235
runs-on: ubuntu-latest
236236
steps:
237237
- name: Harden Runner
238-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
238+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
239239
with:
240240
egress-policy: audit
241241

@@ -253,7 +253,7 @@ jobs:
253253
run: rustup override set ${{ matrix.toolchain }}
254254
- name: Cache restore
255255
id: cache-restore
256-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
256+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
257257
with:
258258
path: |
259259
~/.cargo/bin/
@@ -280,7 +280,7 @@ jobs:
280280
runs-on: ubuntu-latest
281281
steps:
282282
- name: Harden Runner
283-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
283+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
284284
with:
285285
egress-policy: audit
286286

@@ -297,7 +297,7 @@ jobs:
297297
run: sudo apt install lld
298298
- name: Cache restore
299299
id: cache-restore
300-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
300+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
301301
with:
302302
path: |
303303
~/.cargo/bin/
@@ -320,7 +320,7 @@ jobs:
320320
runs-on: ubuntu-latest
321321
steps:
322322
- name: Harden Runner
323-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
323+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
324324
with:
325325
egress-policy: audit
326326

@@ -342,19 +342,19 @@ jobs:
342342
runs-on: ubuntu-latest
343343
steps:
344344
- name: Harden Runner
345-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
345+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
346346
with:
347347
egress-policy: audit
348348

349349
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
350-
- uses: EmbarkStudios/cargo-deny-action@e2f4ede4a4e60ea15ff31bc0647485d80c66cfba # v2.0.4
350+
- uses: EmbarkStudios/cargo-deny-action@4de59db63a066737e557c2c4dd3d1f70206de781 # v2.0.10
351351

352352
cargo-msrv:
353353
name: Verify MSRV (cargo-msrv)
354354
runs-on: ubuntu-latest
355355
steps:
356356
- name: Harden Runner
357-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
357+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
358358
with:
359359
egress-policy: audit
360360
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

‎.github/workflows/scorecards.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131

3232
steps:
3333
- name: Harden Runner
34-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
34+
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
3535
with:
3636
egress-policy: audit
3737

@@ -41,7 +41,7 @@ jobs:
4141
persist-credentials: false
4242

4343
- name: "Run analysis"
44-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
44+
uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
4545
with:
4646
results_file: results.sarif
4747
results_format: sarif
@@ -63,14 +63,14 @@ jobs:
6363
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6464
# format to the repository Actions tab.
6565
- name: "Upload artifact"
66-
uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
66+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
6767
with:
6868
name: SARIF file
6969
path: results.sarif
7070
retention-days: 5
7171

7272
# Upload the results to GitHub's code scanning dashboard.
7373
- name: "Upload to code-scanning"
74-
uses: github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
74+
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
7575
with:
7676
sarif_file: results.sarif

0 commit comments

Comments
 (0)