diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 81bae9ac..12301490 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,5 +1,4 @@ version: 2 - updates: - package-ecosystem: "github-actions" directory: "/" diff --git a/.github/workflows/service-push.yml b/.github/workflows/service-push.yml index 15423664..03e96ba5 100644 --- a/.github/workflows/service-push.yml +++ b/.github/workflows/service-push.yml @@ -473,7 +473,7 @@ jobs: labels: "organization: ${{github.repository_owner}}, repository: ${{github.repository}}, branch: ${{needs.Setup.outputs.Branch}}, commit: ${{needs.Setup.outputs.ShaHash}}, date: ${{needs.Setup.outputs.Date}}, timestamp: ${{needs.Setup.outputs.Timestamp}}" - name: Upload Trivy scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v1 + uses: github/codeql-action/upload-sarif@v2 with: sarif_file: 'trivy-results.sarif'