Merge pull request #2943 from dexidp/dependabot/github_actions/github/codeql-action-2.3.3

build(deps): bump github/codeql-action from 2.3.1 to 2.3.3
3 years ago · 5b3ee7b42e
2 changed files with 2 additions and 2 deletions
--- a/.github/workflows/analysis-scorecard.yaml
+++ b/.github/workflows/analysis-scorecard.yaml
@ -42,6 +42,6 @@ jobs:
          retention-days: 5

      - name: Upload results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@8662eabe0e9f338a07350b7fd050732745f93848 # v2.3.1
+        uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
        with:
          sarif_file: results.sarif
--- a/.github/workflows/artifacts.yaml
+++ b/.github/workflows/artifacts.yaml
@ -181,6 +181,6 @@ jobs:
          retention-days: 5

      - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@8662eabe0e9f338a07350b7fd050732745f93848 # v2.3.1
+        uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3
        with:
          sarif_file: trivy-results.sarif