From 1306f4809e3286545c2d0b967c34444861e7b971 Mon Sep 17 00:00:00 2001 From: Kip Hart <41959581+kip-hart@users.noreply.github.com> Date: Tue, 25 Jun 2024 10:53:19 -0700 Subject: [PATCH] Update ossar-analysis.yml --- .github/workflows/ossar-analysis.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ossar-analysis.yml b/.github/workflows/ossar-analysis.yml index 2e0dfae1..b3a84140 100644 --- a/.github/workflows/ossar-analysis.yml +++ b/.github/workflows/ossar-analysis.yml @@ -16,7 +16,7 @@ jobs: steps: # Checkout your code repository to scan - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@main with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. @@ -29,17 +29,17 @@ jobs: # Install dotnet, used by OSSAR - name: Install .NET - uses: actions/setup-dotnet@v1 + uses: actions/setup-dotnet@main with: dotnet-version: '6.0.x' # Run open source static analysis tools - name: Run OSSAR - uses: github/ossar-action@v1 + uses: github/ossar-action@main id: ossar # Upload results to the Security tab - name: Upload OSSAR results - uses: github/codeql-action/upload-sarif@v1 + uses: github/codeql-action/upload-sarif@main with: sarif_file: ${{ steps.ossar.outputs.sarifFile }}