Merge pull request #4440 from dexidp/dependabot/github_actions/github/codeql-action-4.31.7

build(deps): bump github/codeql-action from 4.31.3 to 4.31.7
2 months ago · 30d89fdf5b
2 changed files with 2 additions and 2 deletions
--- a/.github/workflows/analysis-scorecard.yaml
+++ b/.github/workflows/analysis-scorecard.yaml
@ -42,6 +42,6 @@ jobs:
          retention-days: 5

      - name: Upload results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v3.29.5
+        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v3.29.5
        with:
          sarif_file: results.sarif
--- a/.github/workflows/artifacts.yaml
+++ b/.github/workflows/artifacts.yaml
@ -233,6 +233,6 @@ jobs:
          overwrite: true

      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v3.29.5
+        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v3.29.5
        with:
          sarif_file: trivy-results.sarif