deps(actions)(deps): bump MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml from 2.1.0 to 2.1.1 in the third-party-actions-minor-patch group across 1 directory

[dependabot]

Bumps the third-party-actions-minor-patch group with 1 update in the / directory: MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml.

Updates MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml from 2.1.0 to 2.1.1

Release notes

Sourced from MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml's releases.

2.1.1

@​metamask/action-code-scanner-github

Added

• Add .github/ as a workspace package for workflow versioning

Changed

• Use token exchange for release publishing instead of GITHUB_TOKEN
• Grant workflows: write permission in onboarding workflow

Fixed

• Update onboarding workflow to grant write permission for workflows (#92)
• Fix: slack action (#95)
• fix: resource not accessible by integration
• Fix Slack webhook configuration to use webhook-type input instead of deprecated SLACK_WEBHOOK_TYPE env var
• Add actions: read permission to zizmor job to fix "resource not accessible by integration" errors in private repositories

Changelog

Sourced from MetaMask/action-security-code-scanner/.github/workflows/security-scan.yml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[2.1.1]

Added

• Add .github/ as a workspace package for workflow versioning

Changed

• Use token exchange for release publishing instead of GITHUB_TOKEN
• Grant workflows: write permission in onboarding workflow

Fixed

• Fix Slack webhook configuration to use webhook-type input instead of deprecated SLACK_WEBHOOK_TYPE env var
• Add actions: read permission to the zizmor job to fix "resource not accessible by integration" errors in private repositories

[2.1.0]

Added

• Add zizmor static analysis of GitHub Actions workflows

Fixed

• Addressed zizmor findings

[2.0.5]

Added

• feat: add rule to catch npx usage in JS/TS/YAML

Fixed

• fix: add .security-scanner directory to ignored paths

[2.0.4]

Changed

• Updated language detector to remove Javascript as fallback default language

... (truncated)

Commits

• becb242 2.1.1 (#99)
• 241152c chore: Add MetaMask/core-platform as co-owner to CODEOWNERS file (#100)
• f6b7fda fix: fix changelog (#98)
• 21274fc add missing changelog (#97)
• 2779d1f Fix: slack action (#95)
• d46d169 fix SLACK_WEBHOOK_TYPE to lowercase in workflow files (#94)
• 737eb37 Merge pull request #92 from MetaMask/onboarding-automation-permissions-fix
• e43c3d2 Merge pull request #93 from MetaMask/mrtenz/use-token-exchange-for-release
• 4a31b66 Fix contents permission in main.yml
• 3bd10d5 ci: use token exchange for release workflow
• Additional commits viewable in compare view

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}