Update pipeline-scan-py.yml

Author: tjarrettveracode

.github/workflows/pipeline-scan-py.yml

@@ -18,7 +18,7 @@ jobs:
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
 
   # zip the project and move it to a staging directory
     - name: Zip Project
@@ -27,7 +27,7 @@ jobs:
         build-name: project.zip
 
     - name: Archive package
-      uses: actions/upload-artifact@v2
+      uses: actions/upload-artifact@v4
       with:
         name: CodePackage
         path: project.zip
@@ -41,7 +41,7 @@ jobs:
 
     steps:
     - name: Retrieve artifact
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4
       with:
         name: CodePackage
         path: /github/home
@@ -53,7 +53,7 @@ jobs:
         java -jar /opt/veracode/pipeline-scan.jar --veracode_api_id="${{secrets.VERACODE_API_ID}}" --veracode_api_key="${{secrets.VERACODE_API_KEY}}" --fail_on_severity="Very High, High" --file="project.zip" --app_id="${{secrets.VERACODE_APP_ID}}" --json_output_file="results.json" --project_name ${{github.event.repository.name}} --project_url ${{github.event.repository.url}} --project_ref ${{github.sha}}
       continue-on-error: true
 
-    - uses: actions/upload-artifact@v2
+    - uses: actions/upload-artifact@v4
       with:
         name: ScanResults
         path: /github/home/results.json
@@ -65,7 +65,7 @@ jobs:
     steps:
 
     - name: Retrieve results
-      uses: actions/download-artifact@v2
+      uses: actions/download-artifact@v4
       with:
         name: ScanResults
 
@@ -83,7 +83,7 @@ jobs:
   opensource-scan:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v5
     - name: SCA Agent scan
       env: # Set the secret as an input
         SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}