File tree Expand file tree Collapse file tree 7 files changed +24
-24
lines changed Expand file tree Collapse file tree 7 files changed +24
-24
lines changed Original file line number Diff line number Diff line change @@ -41,16 +41,16 @@ jobs:
41
41
42
42
steps :
43
43
- name : Harden Runner
44
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
44
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
45
45
with :
46
46
egress-policy : audit
47
47
48
48
- name : Checkout repository
49
- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
49
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
50
50
51
51
# Initializes the CodeQL tools for scanning.
52
52
- name : Initialize CodeQL
53
- uses : github/codeql-action/init@46ed16ded91731b2df79a2893d3aea8e9f03b5c4 # v2.20.3
53
+ uses : github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
54
54
with :
55
55
languages : ${{ matrix.language }}
56
56
# If you wish to specify custom queries, you can do so here or in a config file.
64
64
65
65
- name : Use Node.js v18.x
66
66
if : matrix.language == 'cpp'
67
- uses : actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3.7.0
67
+ uses : actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
68
68
with :
69
69
node-version : 18.x
70
70
84
84
# ./location_of_script_within_repo/buildscript.sh
85
85
86
86
- name : Perform CodeQL Analysis
87
- uses : github/codeql-action/analyze@46ed16ded91731b2df79a2893d3aea8e9f03b5c4 # v2.20.3
87
+ uses : github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
88
88
with :
89
89
category : " /language:${{matrix.language}}"
Original file line number Diff line number Diff line change @@ -17,11 +17,11 @@ jobs:
17
17
runs-on : ubuntu-latest
18
18
steps :
19
19
- name : Harden Runner
20
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
20
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
21
21
with :
22
22
egress-policy : audit
23
23
24
24
- name : ' Checkout Repository'
25
- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
25
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
26
26
- name : ' Dependency Review'
27
- uses : actions/dependency-review-action@1360a344ccb0ab6e9475edef90ad2f46bf8003b1 # v3.0.6
27
+ uses : actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
Original file line number Diff line number Diff line change @@ -10,11 +10,11 @@ jobs:
10
10
runs-on : ubuntu-latest
11
11
steps :
12
12
- name : Harden Runner
13
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
13
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
14
14
with :
15
15
egress-policy : audit
16
16
17
- - uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
17
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
18
18
- run : npm install
19
19
- name : check clang-format
20
20
run : |
Original file line number Diff line number Diff line change @@ -20,13 +20,13 @@ jobs:
20
20
21
21
steps :
22
22
- name : Harden Runner
23
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
23
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
24
24
with :
25
25
egress-policy : audit
26
26
27
- - uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
27
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
28
28
- name : Use Node.js ${{ matrix.node-version }}
29
- uses : actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3.7.0
29
+ uses : actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
30
30
with :
31
31
node-version : ${{ matrix.node-version }}
32
32
-
run :
npm install -g [email protected]
@@ -41,11 +41,11 @@ jobs:
41
41
container : node
42
42
steps :
43
43
- name : Harden Runner
44
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
44
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
45
45
with :
46
46
egress-policy : audit
47
47
48
- - uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
48
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
49
49
- run : npm i -g n && n nightly
50
50
- run : node -p process.versions
51
51
- name : Environment Information
Original file line number Diff line number Diff line change @@ -31,17 +31,17 @@ jobs:
31
31
32
32
steps :
33
33
- name : Harden Runner
34
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
34
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
35
35
with :
36
36
egress-policy : audit
37
37
38
38
- name : " Checkout code"
39
- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
39
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
40
40
with :
41
41
persist-credentials : false
42
42
43
43
- name : " Run analysis"
44
- uses : ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
44
+ uses : ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
45
45
with :
46
46
results_file : results.sarif
47
47
results_format : sarif
@@ -63,14 +63,14 @@ jobs:
63
63
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
64
64
# format to the repository Actions tab.
65
65
- name : " Upload artifact"
66
- uses : actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
66
+ uses : actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
67
67
with :
68
68
name : SARIF file
69
69
path : results.sarif
70
70
retention-days : 5
71
71
72
72
# Upload the results to GitHub's code scanning dashboard.
73
73
- name : " Upload to code-scanning"
74
- uses : github/codeql-action/upload-sarif@46ed16ded91731b2df79a2893d3aea8e9f03b5c4 # v2.20.3
74
+ uses : github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
75
75
with :
76
76
sarif_file : results.sarif
Original file line number Diff line number Diff line change @@ -11,11 +11,11 @@ jobs:
11
11
container : node
12
12
steps :
13
13
- name : Harden Runner
14
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
14
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
15
15
with :
16
16
egress-policy : audit
17
17
18
- - uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
18
+ - uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
19
19
- run : npx envinfo
20
20
- name : Build and Deploy
21
21
env :
Original file line number Diff line number Diff line change @@ -13,12 +13,12 @@ jobs:
13
13
container : node
14
14
steps :
15
15
- name : Harden Runner
16
- uses : step-security/harden-runner@55d479fb1c5bcad5a4f9099a5d9f37c8857b2845 # v2.4 .1
16
+ uses : step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9 .1
17
17
with :
18
18
egress-policy : audit
19
19
20
20
- name : Checkout
21
- uses : actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
21
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
22
22
with :
23
23
persist-credentials : false
24
24
- run : npx envinfo
You can’t perform that action at this time.
0 commit comments