v1.6.0 (#31) (#32)

Author: davidknise

.github/workflows/on-push-verification.yml

@@ -14,10 +14,10 @@ jobs:
     steps:
 
       # Checkout your code repository to scan
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
       # Install dotnet, used by MSDO
-    - uses: actions/setup-dotnet@v1
+    - uses: actions/setup-dotnet@v3
       with:
         dotnet-version: |
           3.1.x
@@ -31,7 +31,7 @@ jobs:
 
       # Upload alerts to the Security tab
     - name: Upload alerts to Security tab
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.msdo.outputs.sarifFile }}
 

.github/workflows/sample-workflow-ubuntu-latest.yml

@@ -15,10 +15,10 @@ jobs:
     steps:
 
       # Checkout your code repository to scan
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
       # Install dotnet, used by MSDO
-    - uses: actions/setup-dotnet@v1
+    - uses: actions/setup-dotnet@v3
       with:
         dotnet-version: |
           3.1.x
@@ -32,7 +32,7 @@ jobs:
 
       # Upload alerts to the Security tab
     - name: Upload alerts to Security tab
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.msdo.outputs.sarifFile }}
 

.github/workflows/sample-workflow-windows-latest.yml

@@ -15,10 +15,10 @@ jobs:
     steps:
 
       # Checkout your code repository to scan
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
 
       # Install dotnet, used by MSDO
-    - uses: actions/setup-dotnet@v1
+    - uses: actions/setup-dotnet@v3
       with:
         dotnet-version: |
           5.0.x
@@ -31,7 +31,7 @@ jobs:
 
       # Upload alerts to the Security tab
     - name: Upload alerts to Security tab
-      uses: github/codeql-action/upload-sarif@v1
+      uses: github/codeql-action/upload-sarif@v2
       with:
         sarif_file: ${{ steps.msdo.outputs.sarifFile }}
 

README.md

@@ -31,8 +31,8 @@ Run **Microsoft Security DevOps (MSDO)** with the default policy and recommended
 
 ```yaml
 steps:
-- uses: actions/checkout@v2
-- uses: actions/setup-dotnet@v1
+- uses: actions/checkout@v3
+- uses: actions/setup-dotnet@v3
   with:
     dotnet-version: |
       5.0.x
@@ -41,7 +41,7 @@ steps:
   uses: microsoft/security-devops-action@preview
   id: msdo
 - name: Upload results to Security tab
-  uses: github/codeql-action/upload-sarif@v1
+  uses: github/codeql-action/upload-sarif@v2
   with:
     sarif_file: ${{ steps.msdo.outputs.sarifFile }}
 ```
@@ -52,7 +52,7 @@ To upload results to the Security tab of your repo, run the `github/codeql-actio
 
 ```yaml
 - name: Upload results to Security tab
-  uses: github/codeql-action/upload-sarif@v1
+  uses: github/codeql-action/upload-sarif@v2
   with:
     sarif_file: ${{ steps.msdo.outputs.sarifFile }}
 ```

action.yml

@@ -20,5 +20,5 @@ outputs:
   sarifFile:
     description: A file path to a SARIF results file.
 runs:
-  using: 'node12'
+  using: 'node16'
   main: 'lib/action.js'