From 7589f5eae7d2b8fbd2776b78377e8d650726159d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Oct 2025 21:15:05 +0000 Subject: [PATCH] Bump github/codeql-action from 3 to 4 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/security-scan.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index c5f492a..89a78b8 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -67,7 +67,7 @@ jobs: # - name: Upload Checkov SARIF report # if: success() || failure() - # uses: github/codeql-action/upload-sarif@v3 + # uses: github/codeql-action/upload-sarif@v4 # with: # sarif_file: results_sarif.sarif # wait-for-processing: true @@ -82,7 +82,7 @@ jobs: - name: Upload calibrated Checkov SARIF report if: success() || failure() - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: checkov_findings_high_critical.sarif wait-for-processing: true @@ -90,7 +90,7 @@ jobs: - name: Upload Terrascan SARIF report if: success() || failure() - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: terrascan.sarif wait-for-processing: true @@ -98,7 +98,7 @@ jobs: - name: Upload tfsec SARIF report if: success() || failure() - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: tfsec.sarif wait-for-processing: true @@ -169,7 +169,7 @@ jobs: jq '.runs[].results[].locations[].physicalLocation.artifactLocation.uri |= "file://" + .' reports/zap-scan-report.json > reports/zap-scan-report.sarif - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: always() with: sarif_file: reports/zap-scan-report.sarif @@ -207,7 +207,7 @@ jobs: bandit -r python-app -f sarif -o bandit-results.sarif - name: Upload SARIF results to GitHub Security - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: always() # Upload results whether the scan passed or failed with: sarif_file: bandit-results.sarif