diff --git a/.github/workflows/build-push-images.yml b/.github/workflows/build-push-images.yml index 8f507d3c..ca1211d3 100644 --- a/.github/workflows/build-push-images.yml +++ b/.github/workflows/build-push-images.yml @@ -61,7 +61,7 @@ jobs: output: "trivy-results.sarif" - name: Upload Trivy scan results to GitHub Security tab for ${{ matrix.ecr_repository }} id: trivy_upload_sarif - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 if: always() with: sarif_file: "trivy-results.sarif" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a99c636c..dd619a10 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,14 +25,14 @@ jobs: fetch-depth: 2 - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 with: working-directory: ${{ matrix.directory }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 diff --git a/.github/workflows/workflow-pr.yml b/.github/workflows/workflow-pr.yml index 5e750f34..5adbe933 100644 --- a/.github/workflows/workflow-pr.yml +++ b/.github/workflows/workflow-pr.yml @@ -41,7 +41,7 @@ jobs: fetch-depth: "0" - run: make check-code - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@v3 if: always() with: sarif_file: results.sarif