Repository navigation
fix(deps): bump h2 to 0.4.16 and ignore RUSTSEC-2026-0258 for h2 0.3 … #5119
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Static Analysis | |
| on: | |
| push: | |
| branches: | |
| - master | |
| - "**" # Run on all branches (includes PR branches) | |
| workflow_dispatch: # Allow manual trigger from GitHub UI | |
| permissions: | |
| contents: read | |
| jobs: | |
| static-analysis: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| - id: dd-token | |
| uses: ./.github/actions/dd-token | |
| with: | |
| policy: public-vectordotdev-vector-static-analysis | |
| - name: Datadog Static Analyzer | |
| uses: DataDog/datadog-static-analyzer-github-action@8340f18875fcefca86844b5f947ce2431387e552 # v3.0.0 | |
| with: | |
| dd_api_key: ${{ env.DD_API_KEY }} | |
| dd_app_key: ${{ env.DD_APP_KEY }} | |
| dd_site: datadoghq.com | |
| secrets_enabled: true |