File tree Expand file tree Collapse file tree 7 files changed +17
-17
lines changed
Expand file tree Collapse file tree 7 files changed +17
-17
lines changed Original file line number Diff line number Diff line change 4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
44+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
4545 with :
4646 disable-sudo : true
4747 egress-policy : block
5656
5757 # Initializes the CodeQL tools for scanning.
5858 - name : Initialize CodeQL
59- uses : github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
59+ uses : github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
6060 with :
6161 languages : ${{ matrix.language }}
6262 # If you wish to specify custom queries, you can do so here or in a config file.
6666 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6767 # If this step fails, then you should remove it and run the build manually (see below)
6868 - name : Autobuild
69- uses : github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
69+ uses : github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
7070
7171 # ℹ️ Command-line programs to run using the OS shell.
7272 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
7979 # ./location_of_script_within_repo/buildscript.sh
8080
8181 - name : Perform CodeQL Analysis
82- uses : github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
82+ uses : github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
8383 with :
8484 category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change 1919 ruby : ['3.0', '3.1', '3.2', '3.3']
2020 steps :
2121 - name : Harden Runner
22- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
22+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2323 with :
2424 disable-sudo : true
2525 egress-policy : block
@@ -37,10 +37,10 @@ jobs:
3737 - name : Setup Go
3838 uses : actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
3939 with :
40- go-version : ' 1.21 '
40+ go-version : ' 1.24 '
4141 check-latest : true
4242 - name : Setup Ruby
43- uses : ruby/setup-ruby@d781c1b4ed31764801bfae177617bb0446f5ef8d # v1.218 .0
43+ uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
4444 with :
4545 ruby-version : ${{ matrix.ruby }}
4646 bundler-cache : true
Original file line number Diff line number Diff line change 1717 runs-on : ubuntu-latest
1818 steps :
1919 - name : Harden Runner
20- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
20+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2121 with :
2222 disable-sudo : true
2323 egress-policy : block
Original file line number Diff line number Diff line change 1616 runs-on : ubuntu-latest
1717 steps :
1818 - name : Harden Runner
19- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
19+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2020 with :
2121 disable-sudo : true
2222 egress-policy : block
2929 - name : Checkout repo
3030 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3131 - name : Install Ruby 3.0
32- uses : ruby/setup-ruby@d781c1b4ed31764801bfae177617bb0446f5ef8d # v1.218 .0
32+ uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
3333 with :
3434 ruby-version : " 3.0"
3535 bundler-cache : true
Original file line number Diff line number Diff line change @@ -18,13 +18,13 @@ jobs:
1818
1919 steps :
2020 - name : Harden Runner
21- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
21+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2222 with :
2323 egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
2424 - name : Checkout repo
2525 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2626 - name : Install Ruby ${{ env.ruby_version }}
27- uses : ruby/setup-ruby@d781c1b4ed31764801bfae177617bb0446f5ef8d # v1.218 .0
27+ uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
2828 with :
2929 ruby-version : ${{ env.ruby_version }}
3030 bundler-cache : true
Original file line number Diff line number Diff line change 2525
2626 steps :
2727 - name : Harden Runner
28- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
28+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
2929 with :
3030 disable-sudo : true
3131 egress-policy : block
4949 persist-credentials : false
5050
5151 - name : " Run analysis"
52- uses : ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
52+ uses : ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
5353 with :
5454 results_file : results.sarif
5555 results_format : sarif
6161
6262 # Upload the results to GitHub's code scanning dashboard.
6363 - name : " Upload to code-scanning"
64- uses : github/codeql-action/upload-sarif@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
64+ uses : github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
6565 with :
6666 sarif_file : results.sarif
Original file line number Diff line number Diff line change 3838 runs-on : ${{ matrix.os }}
3939 steps :
4040 - name : Harden Runner
41- uses : step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
41+ uses : step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
4242 with :
4343 disable-sudo : true
4444 egress-policy : block
5151 - name : Checkout repo
5252 uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5353 - name : Install Ruby ${{ matrix.ruby }}
54- uses : ruby/setup-ruby@d781c1b4ed31764801bfae177617bb0446f5ef8d # v1.218 .0
54+ uses : ruby/setup-ruby@6c79f721fa26dd64559c2700086ac852c18e0756 # v1.225 .0
5555 with :
5656 ruby-version : " ${{ matrix.ruby }}"
5757 bundler-cache : true
You can’t perform that action at this time.
0 commit comments