opensource/code-server
3
0
Fork 0
mirror of https://github.com/coder/code-server.git synced 2026-11-05 08:23:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update remaining codeql actions

Browse Source 
Also add a group since they have to all be updated together.
This commit is contained in:
Asher
2026-11-02 13:20:36 -09:00
parent f65b229eab
commit 74d06e2e36
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/dependabot.yaml
+4
View File
@@ -9,6 +9,10 @@ updates:
cooldown:
default-days: 7
labels: []
groups:
codeql-action:
patterns:
- "github/codeql-action/*"
- package-ecosystem: "npm"
directory: "/"
.github/workflows/security.yaml
+3 -3
View File
@@ -62,7 +62,7 @@ jobs:
severity: "HIGH,CRITICAL"
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
with:
sarif_file: "trivy-repo-results.sarif"
@@ -80,13 +80,13 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
with:
config-file: ./.github/codeql-config.yml
languages: javascript
- name: Autobuild
uses: github/codeql-action/autobuild@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1