diff --git a/.github/workflows/checkov.yaml b/.github/workflows/checkov.yaml index 707435d..4007567 100644 --- a/.github/workflows/checkov.yaml +++ b/.github/workflows/checkov.yaml @@ -30,7 +30,7 @@ jobs: checkov --framework=dockerfile -f ${{ inputs.dockerfile_path }} -o sarif - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: success() || failure() with: sarif_file: results.sarif diff --git a/.github/workflows/grype.yaml b/.github/workflows/grype.yaml index c7cd3b0..67436fb 100644 --- a/.github/workflows/grype.yaml +++ b/.github/workflows/grype.yaml @@ -45,7 +45,7 @@ jobs: run: cat ${{ steps.scan.outputs.sarif }} - name: Upload Grype scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: success() || failure() with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/snyk.yaml b/.github/workflows/snyk.yaml index 50e6677..1e6c863 100644 --- a/.github/workflows/snyk.yaml +++ b/.github/workflows/snyk.yaml @@ -45,7 +45,7 @@ jobs: # Push the Snyk Code results into GitHub Code Scanning tab - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 if: success() || failure() with: sarif_file: snyk.sarif diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml index 1039311..187c770 100644 --- a/.github/workflows/trivy.yaml +++ b/.github/workflows/trivy.yaml @@ -44,6 +44,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: 'trivy-results.sarif'