Nightly > Main CI Fix

[Wikid82]

No description provided.

[Copilot]

Pull request overview

This PR fixes CI workflow issues related to the nightly to main promotion process by correcting workflow references and updating GitHub Actions to their latest versions.

Changes:

• Corrected workflow reference from supply-chain-pr.yml to supply-chain-verify.yml in promotion workflows
• Updated github/codeql-action hash references across multiple workflows
• Enhanced supply-chain-verify.yml with workflow_dispatch event handling logic
• Updated action versions for peter-evans/create-pull-request and peter-evans/find-comment
• Added additional PR validation check in supply-chain-pr.yml

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/weekly-nightly-promotion.yml	Updated workflow reference to use correct supply-chain-verify workflow
.github/workflows/nightly-build.yml	Updated workflow reference and CodeQL action hash
.github/workflows/supply-chain-verify.yml	Added workflow_dispatch event handling and updated find-comment action version
.github/workflows/supply-chain-pr.yml	Updated CodeQL action hash and added PR number validation
.github/workflows/update-geolite2.yml	Updated create-pull-request action version comment
.github/workflows/security-weekly-rebuild.yml	Updated CodeQL action hash
.github/workflows/docker-build.yml	Updated CodeQL action hashes in two locations
.github/workflows/codeql.yml	Updated CodeQL action hashes for init, autobuild, and analyze steps

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

✅ Supply Chain Verification Results

✅ PASSED

📦 SBOM Summary

• Components: 1674

🔍 Vulnerability Scan

Severity	Count
🔴 Critical	0
🟠 High	0
🟡 Medium	0
🟢 Low	0
Total	0

📎 Artifacts

• SBOM (CycloneDX JSON) and Grype results available in workflow artifacts

---

_{Generated by Supply Chain Verification workflow • View Details}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!