From e9d12a1106158fe87df00978b84fe17e4f50570d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Feb 2025 07:02:49 -0700 Subject: [PATCH] chore(deps): Bump the actions-updates group with 2 updates (#50) --- .github/workflows/ci-actions.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-actions.yaml b/.github/workflows/ci-actions.yaml index cf39c23..5d20385 100644 --- a/.github/workflows/ci-actions.yaml +++ b/.github/workflows/ci-actions.yaml @@ -21,7 +21,7 @@ jobs: persist-credentials: false - name: Install the latest version of uv - uses: astral-sh/setup-uv@4db96194c378173c656ce18a155ffc14a9fc4355 # v4 + uses: astral-sh/setup-uv@1edb52594c857e2b5b13128931090f0640537287 # v4 - name: Run zizmor run: uvx zizmor --pedantic --format sarif . > results.sarif @@ -29,7 +29,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3 + uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3 with: sarif_file: results.sarif category: zizmor