diff options
| author | dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | 2023-12-13 20:02:24 (GMT) |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-12-13 20:02:24 (GMT) |
| commit | 184445f4a45c602887ca0624c5295a7b6fea2d21 (patch) | |
| tree | c70ecd85c641daec60a4e222a1595ae45d9370ea /.github/workflows/scorecard.yml | |
| parent | 2f23f2afe6a23c2ff330458acfd1c3ce66bd8fed (diff) | |
| download | hdf5-184445f4a45c602887ca0624c5295a7b6fea2d21.zip hdf5-184445f4a45c602887ca0624c5295a7b6fea2d21.tar.gz hdf5-184445f4a45c602887ca0624c5295a7b6fea2d21.tar.bz2 | |
Bump the github-actions group with 4 updates (#3894)
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [ossf/scorecard-action](https://github.com/ossf/scorecard-action), [github/codeql-action](https://github.com/github/codeql-action) and [actions/setup-python](https://github.com/actions/setup-python).
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Diffstat (limited to '.github/workflows/scorecard.yml')
| -rw-r--r-- | .github/workflows/scorecard.yml | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 7825a5c..9d8e456 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,12 +32,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2 + uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 with: results_file: results.sarif results_format: sarif @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 + uses: github/codeql-action/upload-sarif@305f6546310b9203e892c28c1484e82977f4f63d # v2.22.10 with: sarif_file: results.sarif |