Browse Source

Merge pull request #4395 from dexidp/dependabot/github_actions/actions/upload-artifact-5.0.0

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0
pull/4380/head
Márk Sági-Kazár 4 months ago committed by GitHub
parent
commit
451d281aa5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 2
      .github/workflows/analysis-scorecard.yaml
  2. 2
      .github/workflows/artifacts.yaml

2
.github/workflows/analysis-scorecard.yaml

@ -35,7 +35,7 @@ jobs:
publish_results: true
- name: Upload results as artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
with:
name: OpenSSF Scorecard results
path: results.sarif

2
.github/workflows/artifacts.yaml

@ -225,7 +225,7 @@ jobs:
run: sudo chmod 0644 ./cache/db/trivy.db
- name: Upload Trivy scan results as artifact
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
with:
name: "[${{ github.job }}] Trivy scan results"
path: trivy-results.sarif

Loading…
Cancel
Save