diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index a9ccf494..e6627de1 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -156,7 +156,7 @@ jobs: exit-code: "1" # Fail the build! - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10 + uses: github/codeql-action/upload-sarif@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5 if: always() # Bypass non-zero exit code.. with: sarif_file: "trivy-results.sarif" diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml index 3dbea9e2..bf170584 100644 --- a/.github/workflows/scan.yml +++ b/.github/workflows/scan.yml @@ -31,7 +31,7 @@ jobs: severity: "CRITICAL,HIGH" exit-code: "1" # Fail the build! - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10 + uses: github/codeql-action/upload-sarif@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5 if: always() # Bypass non-zero exit code.. with: sarif_file: "trivy-results.sarif"