From c37e294edbdb6ccae74b40b42fccbaf23b1511b1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 08:25:46 +0000 Subject: [PATCH] [main] Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.6 to 4.37.7. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/malicious-code-scan.lock.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/malicious-code-scan.lock.yml b/.github/workflows/malicious-code-scan.lock.yml index f3f58e6223..e0dbff4358 100644 --- a/.github/workflows/malicious-code-scan.lock.yml +++ b/.github/workflows/malicious-code-scan.lock.yml @@ -42,7 +42,7 @@ # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 (source v9) # - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 # - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 -# - github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 +# - github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 # - github/gh-aw/actions/setup@48e5fa3ff52294d91d97715017a9f8693a48387f # # Container images used: @@ -1660,7 +1660,7 @@ jobs: path: /tmp/gh-aw/sarif/ - name: Upload SARIF to GitHub Code Scanning id: upload_code_scanning_sarif - uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} sarif_file: /tmp/gh-aw/sarif/code-scanning-alert.sarif