From 8f237c70f6fe9d0b5fe35f1d3923261b4d84a9c0 Mon Sep 17 00:00:00 2001 From: Henry McConville Date: Sun, 1 Nov 2026 17:26:35 +0000 Subject: [PATCH] Update GitHub Actions to latest versions Bump actions/checkout to v7, actions/setup-go to v7 and github/codeql-action/upload-sarif to v4. aquasecurity/trivy-action stays on master, as the latest release (v0.36.0) is behind it and bundles an older version of Trivy. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/container-scan.yml | 4 ++-- .github/workflows/main.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml index eac4572..d863a05 100644 --- a/.github/workflows/container-scan.yml +++ b/.github/workflows/container-scan.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Get Current Version id: get-current-version @@ -33,6 +33,6 @@ jobs: output: 'trivy-results.sarif' - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: 'trivy-results.sarif' diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 7b1e760..f11f202 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -10,10 +10,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version-file: 'go.mod'