Skip to content

Conversation

@morri-son
Copy link
Contributor

Description

change trigger

@morri-son morri-son requested a review from a team as a code owner February 27, 2025 10:08
@morri-son morri-son enabled auto-merge (squash) February 27, 2025 10:08
@morri-son morri-son disabled auto-merge February 27, 2025 10:08
@morri-son morri-son merged commit 18a1360 into main Feb 27, 2025
9 of 10 checks passed
@morri-son morri-son deleted the change-trigger branch February 27, 2025 10:08
@ocmbot ocmbot bot added this to the 2025-Q1 milestone Feb 27, 2025

- name: Run Black Duck Full SCA Scan (Push, Manual Trigger or Schedule)
if: ${{ github.event_name != 'pull_request_target' }}
uses: blackduck-inc/[email protected]

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Blackduck SCA Scan' step
Uses Step
uses 'blackduck-inc/black-duck-security-scan' with ref 'v2.0.0', not a pinned commit hash
- name: Run Black Duck SCA Scan (Pull Requests)
if: ${{ github.event_name == 'pull_request_target' }}
# The action sets blackducksca_scan_full internally: for pushes to true and PRs to false
uses: blackduck-inc/black-duck-security-scan@v2.0.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Blackduck SCA Scan' step
Uses Step
uses 'blackduck-inc/black-duck-security-scan' with ref 'v2.0.0', not a pinned commit hash
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants