synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-12 00:14:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: bump the github-actions group across 1 directory with 4 updates (#15762)

Browse Source 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot]
2024-12-05 13:12:07 +00:00
committed by GitHub
parent ca810975e7
commit 0109c9fe6f
3 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
.github/workflows/ci.yaml vendored
View File

@ -188,7 +188,7 @@ jobs:
# Check for any typos # Check for any typos
- name: Check for typos - name: Check for typos
uses: crate-ci/typos@b74202f74b4346efdbce7801d187ec57b266bac8 # v1.27.3 uses: crate-ci/typos@2872c382bb9668d4baa5eade234dcbc0048ca2cf # v1.28.2
with: with:
config: .github/workflows/typos.toml config: .github/workflows/typos.toml
@ -540,7 +540,7 @@ jobs:
timeout-minutes: 25 timeout-minutes: 25
steps: steps:
- name: Harden Runner - name: Harden Runner
uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2
with: with:
egress-policy: audit egress-policy: audit
@ -1146,7 +1146,7 @@ jobs:
version: "2.2.1" version: "2.2.1"
- name: Get Cluster Credentials - name: Get Cluster Credentials
uses: google-github-actions/get-gke-credentials@206d64b64b0eba0a6e2f25113d044c31776ca8d6 # v2.2.2 uses: google-github-actions/get-gke-credentials@9025e8f90f2d8e0c3dafc3128cc705a26d992a6a # v2.3.0
with: with:
cluster_name: dogfood-v2 cluster_name: dogfood-v2
location: us-central1-a location: us-central1-a

2
.github/workflows/scorecard.yml vendored
View File

@ -47,6 +47,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard. # Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning" - name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
with: with:
sarif_file: results.sarif sarif_file: results.sarif

6
.github/workflows/security.yaml vendored
View File

@ -38,7 +38,7 @@ jobs:
uses: ./.github/actions/setup-go uses: ./.github/actions/setup-go
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
with: with:
languages: go, javascript languages: go, javascript
@ -48,7 +48,7 @@ jobs:
rm Makefile rm Makefile
- name: Perform CodeQL Analysis - name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
- name: Send Slack notification on failure - name: Send Slack notification on failure
if: ${{ failure() }} if: ${{ failure() }}
@ -144,7 +144,7 @@ jobs:
severity: "CRITICAL,HIGH" severity: "CRITICAL,HIGH"
- name: Upload Trivy scan results to GitHub Security tab - name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5 uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
with: with:
sarif_file: trivy-results.sarif sarif_file: trivy-results.sarif
category: "Trivy" category: "Trivy"