From f6d610429475bb5889eeb18b868103a84d885506 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 09:11:02 +0000 Subject: [PATCH] Bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 7d9249f5a57288b8a472ddd9cc3ece1921f7dc38 to d97b3428e8eebbb1810cf454d6397886d136b4ba. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7d9249f5a57288b8a472ddd9cc3ece1921f7dc38...d97b3428e8eebbb1810cf454d6397886d136b4ba) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: d97b3428e8eebbb1810cf454d6397886d136b4ba dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/snyk.yml | 4 ++-- .github/workflows/trivy.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/snyk.yml b/.github/workflows/snyk.yml index bb9f9bf51..6997a7f68 100644 --- a/.github/workflows/snyk.yml +++ b/.github/workflows/snyk.yml @@ -44,7 +44,7 @@ jobs: - name: "Upload Snyk Code SARIF to GitHub" # Aligned with v3 for consistency, pinned to SHA for security - uses: "github/codeql-action/upload-sarif@7d9249f5a57288b8a472ddd9cc3ece1921f7dc38" + uses: "github/codeql-action/upload-sarif@d97b3428e8eebbb1810cf454d6397886d136b4ba" if: "always() && hashFiles('snyk-code.sarif') != ''" with: sarif_file: "snyk-code.sarif" @@ -57,7 +57,7 @@ jobs: - name: "Upload Snyk Open Source SARIF to GitHub" # Pinned to CodeQL upload-sarif v3 for security stability; refresh periodically # Aligned with v3 for consistency, pinned to SHA for security - uses: "github/codeql-action/upload-sarif@7d9249f5a57288b8a472ddd9cc3ece1921f7dc38" + uses: "github/codeql-action/upload-sarif@d97b3428e8eebbb1810cf454d6397886d136b4ba" if: "always() && hashFiles('snyk-os.sarif') != ''" with: sarif_file: "snyk-os.sarif" diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index f063b1582..971459ab2 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -37,7 +37,7 @@ jobs: - name: "Upload Trivy scan results to GitHub Security tab" # Pinned to CodeQL upload-sarif v3 for security stability; refresh periodically - uses: "github/codeql-action/upload-sarif@7d9249f5a57288b8a472ddd9cc3ece1921f7dc38" + uses: "github/codeql-action/upload-sarif@d97b3428e8eebbb1810cf454d6397886d136b4ba" if: "always()" # Upload even if scan fails with: sarif_file: "trivy-results.sarif"