diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index da69ee10c..fc7b9d0f2 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -58,7 +58,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -86,6 +86,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index eaec1987e..8e0503ca9 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -48,9 +48,9 @@ jobs: vuln-type: "os,library" severity: "CRITICAL,HIGH" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: - sarif_file: 'trivy-results.sarif' + sarif_file: "trivy-results.sarif" test: name: "test"