Skip to content

Commit 0391ddd

Browse files
committed
fix: Update security workflow to trigger on master branch
2 parents a8fa1ff + da2d7cd commit 0391ddd

File tree

5 files changed

+14
-14
lines changed

5 files changed

+14
-14
lines changed

.github/workflows/ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ jobs:
8181

8282
- name: Upload coverage to Codecov
8383
if: matrix.os == 'ubuntu-latest' && matrix.python-version == env.PYTHON_VERSION_DEFAULT
84-
uses: codecov/codecov-action@v3
84+
uses: codecov/codecov-action@v5
8585
with:
8686
file: ./coverage.xml
8787
flags: unittests

.github/workflows/docker.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ jobs:
4848
type=sha,prefix={{branch}}-
4949
5050
- name: Build Docker image
51-
uses: docker/build-push-action@v5
51+
uses: docker/build-push-action@v6
5252
with:
5353
context: .
5454
platforms: linux/amd64,linux/arm64
@@ -70,7 +70,7 @@ jobs:
7070
output: 'trivy-results.sarif'
7171

7272
- name: Upload Trivy scan results to GitHub Security tab
73-
uses: github/codeql-action/upload-sarif@v2
73+
uses: github/codeql-action/upload-sarif@v3
7474
if: always()
7575
with:
7676
sarif_file: 'trivy-results.sarif'
@@ -87,7 +87,7 @@ jobs:
8787

8888
- name: Push Docker image
8989
if: github.event_name != 'pull_request'
90-
uses: docker/build-push-action@v5
90+
uses: docker/build-push-action@v6
9191
with:
9292
context: .
9393
platforms: linux/amd64,linux/arm64
@@ -113,7 +113,7 @@ jobs:
113113
no-fail: true
114114

115115
- name: Upload Hadolint scan results
116-
uses: github/codeql-action/upload-sarif@v2
116+
uses: github/codeql-action/upload-sarif@v3
117117
if: always()
118118
with:
119119
sarif_file: hadolint-results.sarif

.github/workflows/quality.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@ jobs:
6969
pytest --cov=. --cov-report=xml --cov-report=html
7070
7171
- name: Upload coverage to Codecov
72-
uses: codecov/codecov-action@v3
72+
uses: codecov/codecov-action@v5
7373
with:
7474
file: ./coverage.xml
7575
flags: unittests

.github/workflows/release.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ jobs:
7979
fetch-depth: 0
8080

8181
- name: Download build artifacts
82-
uses: actions/download-artifact@v3
82+
uses: actions/download-artifact@v4
8383
with:
8484
name: dist
8585
path: dist/
@@ -134,7 +134,7 @@ jobs:
134134
url: https://pypi.org/p/mcp-mysql-server
135135
steps:
136136
- name: Download build artifacts
137-
uses: actions/download-artifact@v3
137+
uses: actions/download-artifact@v4
138138
with:
139139
name: dist
140140
path: dist/

.github/workflows/security.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,9 @@ name: Security
22

33
on:
44
push:
5-
branches: [ main ]
5+
branches: [ master ]
66
pull_request:
7-
branches: [ main ]
7+
branches: [ master ]
88
schedule:
99
# Run security checks daily at 2 AM UTC
1010
- cron: '0 2 * * *'
@@ -62,7 +62,7 @@ jobs:
6262
uses: actions/checkout@v4
6363

6464
- name: Dependency Review
65-
uses: actions/dependency-review-action@v3
65+
uses: actions/dependency-review-action@v4
6666
with:
6767
fail-on-severity: moderate
6868

@@ -84,12 +84,12 @@ jobs:
8484
uses: actions/checkout@v4
8585

8686
- name: Initialize CodeQL
87-
uses: github/codeql-action/init@v2
87+
uses: github/codeql-action/init@v3
8888
with:
8989
languages: ${{ matrix.language }}
9090

9191
- name: Autobuild
92-
uses: github/codeql-action/autobuild@v2
92+
uses: github/codeql-action/autobuild@v3
9393

9494
- name: Perform CodeQL Analysis
95-
uses: github/codeql-action/analyze@v2
95+
uses: github/codeql-action/analyze@v3

0 commit comments

Comments
 (0)