Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhancement: Update the GH Actions #817

Merged
merged 6 commits into from
Nov 27, 2023

Conversation

BenjamenMeyer
Copy link
Member

  • move checkout to latest (v4.1.1)
  • move upload artifacts to latest (v3.1.3)
  • move codeql-action to v2 (best version I can find)
  • update the scorecard analysis and move version to latest

- move checkout to latest (v4.1.1)
- move upload artifacts to latest (v3.1.3)
- move codeql-action to v2 (best version I can find)
- update the scorecard analysis and move vesions to latest
@BenjamenMeyer BenjamenMeyer added this to the 0.9.x milestone Nov 24, 2023
@BenjamenMeyer BenjamenMeyer requested review from royfalk, stephengtuggy and a team November 24, 2023 22:48
@BenjamenMeyer BenjamenMeyer self-assigned this Nov 24, 2023
Copy link
Contributor

@stephengtuggy stephengtuggy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me!

GH_TOKEN: ${{ github.token }}
# download the latest version
run: |
gh release download -R github/codeql-action --pattern 'codeql-bundle.tar.gz'
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can specify a tag to lock to a version or leave out the tag and always get the latest release.
It's not clear from the command-line docs if gh release download will work with the SHA hashes of the release so skipping that and just letting it use the latest release.

@BenjamenMeyer BenjamenMeyer merged commit 7d9b6ed into vegastrike:master Nov 27, 2023
31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants