be046dcfb7
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-01-02 12:52:37 +01:00
04e3f42b21
Bump actions/setup-go from 4 to 5
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-07 08:06:47 +01:00
4a93238a15
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-09-21 10:13:46 +02:00
39fc0f9d9d
Update Dependencies
2023-09-16 19:52:52 +02:00
ddeb3760e7
Move GitHub action filter to actual Trivy job
...
Formally, I was editing the wrong job that did not had any issues. Let's try again :)
2023-02-15 14:29:34 +01:00
a35c49607f
Debug GitHub Action for CodeQL Analysis
2023-02-14 12:07:34 +01:00
63a42e6949
Disable CodeQL run for push events for Dependabot
...
Error: Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. See https://docs.github.com/en/code-security/secure-coding/configuring-code-scanning#scanning-on-push for more information on how to configure these events.
2023-02-11 01:05:14 +01:00
c63cc2f80a
Update GitHub Action workflow versions
2022-10-23 10:28:41 +02:00
d80761a973
Update CodeQL
2022-06-07 17:21:05 +02:00
38785d79b7
Create codeql-analysis.yml
2021-11-10 13:42:48 +01:00
