dependabot[bot]
8d7e56c493
Bumps the ci group with 10 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.0.0` | `6.5.0` | | [fluxcd/gha-workflows/.github/workflows/backport.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.12.0` | | [fluxcd/pkg/actions/kustomize](https://github.com/fluxcd/pkg) | `1.33.0` | `1.36.0` | | [fluxcd/pkg/actions/yq](https://github.com/fluxcd/pkg) | `1.33.0` | `1.36.0` | | [fluxcd/pkg/actions/crdjsonschema](https://github.com/fluxcd/pkg) | `1.33.0` | `1.36.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.2` | `7.2.3` | | [fluxcd/gha-workflows/.github/workflows/code-scan.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.12.0` | | [fluxcd/gha-workflows/.github/workflows/labels-sync.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.12.0` | | [fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml](https://github.com/fluxcd/gha-workflows) | `0.11.0` | `0.12.0` | Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) Updates `actions/setup-go` from 6.0.0 to 6.5.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...924ae3a1cded613372ab5595356fb5720e22ba16) Updates `fluxcd/gha-workflows/.github/workflows/backport.yaml` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.11.0...v0.12.0) Updates `fluxcd/pkg/actions/kustomize` from 1.33.0 to 1.36.0 - [Commits](https://github.com/fluxcd/pkg/compare/5a7f3ce0de742b6c561a50f90940d81cf6fc698d...b98e2b0975e0863f32790229ce7c9f097ed67706) Updates `fluxcd/pkg/actions/yq` from 1.33.0 to 1.36.0 - [Commits](https://github.com/fluxcd/pkg/compare/5a7f3ce0de742b6c561a50f90940d81cf6fc698d...b98e2b0975e0863f32790229ce7c9f097ed67706) Updates `fluxcd/pkg/actions/crdjsonschema` from 1.33.0 to 1.36.0 - [Commits](https://github.com/fluxcd/pkg/compare/5a7f3ce0de742b6c561a50f90940d81cf6fc698d...b98e2b0975e0863f32790229ce7c9f097ed67706) Updates `goreleaser/goreleaser-action` from 7.2.2 to 7.2.3 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13b6b1a9625abc9e6e439d9c05a8f2190e94) Updates `fluxcd/gha-workflows/.github/workflows/code-scan.yaml` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.11.0...v0.12.0) Updates `fluxcd/gha-workflows/.github/workflows/labels-sync.yaml` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.11.0...v0.12.0) Updates `fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/fluxcd/gha-workflows/releases) - [Commits](https://github.com/fluxcd/gha-workflows/compare/v0.11.0...v0.12.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/backport.yaml dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/pkg/actions/kustomize dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/pkg/actions/yq dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/pkg/actions/crdjsonschema dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: goreleaser/goreleaser-action dependency-version: 7.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/code-scan.yaml dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/gha-workflows/.github/workflows/upgrade-fluxcd-pkg.yaml dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci ... Signed-off-by: dependabot[bot] <support@github.com>
20 lines
541 B
YAML
20 lines
541 B
YAML
name: scan
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches: [ 'main', 'release/**' ]
|
|
pull_request:
|
|
branches: [ 'main', 'release/**' ]
|
|
schedule:
|
|
- cron: '18 10 * * 3'
|
|
permissions: read-all
|
|
jobs:
|
|
analyze:
|
|
permissions:
|
|
contents: read # for reading the repository code.
|
|
security-events: write # for uploading the CodeQL analysis results.
|
|
uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.12.0
|
|
secrets:
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
fossa-token: ${{ secrets.FOSSA_TOKEN }}
|