diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 9ecdf42..8404b38 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -134,16 +134,16 @@ jobs: # CodeQL Analysis - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v4 with: languages: javascript, python queries: security-extended,security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v4 with: category: "/language:javascript,python" @@ -199,7 +199,7 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v4 if: always() with: sarif_file: 'trivy-results.sarif' @@ -217,7 +217,7 @@ jobs: output: scout-results.sarif - name: Upload Scout scan results - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v4 if: always() && hashFiles('scout-results.sarif') != '' with: sarif_file: 'scout-results.sarif'