Просмотр исходного кода

Reconcile sha and version (#6843)

Without this, sha is inconsistent with version.
This happened because a single sha was targetted for multiple versions
in codeql.

Dependabot messed it up, and fixed it in [1]
CodeQL was particularly mentioned in [2]

Since then, other bumps passed and changed the sha
without the version, so it lead to a version mismatch.

Now that dependabot is fixed, we can bump it again and no
issue should arise.

[1]: https://github.com/dependabot/dependabot-core/commit/4a60b9578ff79dc4dbc38cfa047845142c1fb9d3
[2]: https://github.com/dependabot/dependabot-core/pull/13985

Signed-off-by: Jean-Philippe Evrard <jean-philippe.evrard+rochepub@external.roche.com>
Jean-Philippe Evrard 2 недель назад
Родитель
Сommit
067ce8b9e6
1 измененных файлов с 1 добавлено и 1 удалено
  1. 1 1
      .github/workflows/scorecard.yml

+ 1 - 1
.github/workflows/scorecard.yml

@@ -37,6 +37,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v3.29.5
+        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           sarif_file: results.sarif