Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the
Comment |
c60d9b1 to
aff6d78
Compare
aff6d78 to
6a3a2d7
Compare
6cf055b to
643bac5
Compare
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
.github/workflows/ci.yaml
Outdated
| - name: 🏗 Set up build cache | ||
| id: cache | ||
| uses: actions/cache@v4.3.0 | ||
| uses: actions/cache@v5.0.3 |
Check failure
Code scanning / zizmor
runtime artifacts potentially vulnerable to a cache poisoning attack
.github/workflows/ci.yaml
Outdated
| - name: 🏗 Set up build cache | ||
| id: cache | ||
| uses: actions/cache@v4.3.0 | ||
| uses: actions/cache@v5.0.3 |
Check failure
Code scanning / zizmor
unpinned action reference
643bac5 to
6d432ce
Compare
413f324 to
c36bff6
Compare
c36bff6 to
5802f72
Compare
This PR contains the following updates:
v4.3.0→v5.0.4Release Notes
actions/cache (actions/cache)
v5.0.4Compare Source
v5.0.3Compare Source
What's Changed
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)@actions/coreto v2.0.3Full Changelog: actions/cache@v5...v5.0.3
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.