Bump the scorecard action

Fixes TraceMachina#1329
aaronmondal · Sep 6, 2024 · a46b829 · a46b829
1 parent 84eab85
commit a46b829
Showing 1 changed file with 9 additions and 9 deletions.
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
@@ -16,36 +16,36 @@ concurrency:
 jobs:
   analysis:
     name: Scorecard analysis
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       security-events: write
       id-token: write
     timeout-minutes: 5
     steps:
       - name: Checkout
-        uses: >- # v4.1.1
-          actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+        uses: >- # v4.1.7
+          actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
         with:
           persist-credentials: false
 
       - name: Run analysis
-        uses: >- # v2.3.1
-          ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736
+        uses: >- # v2.4.0
+          ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46
         with:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
 
       - name: Upload artifact
-        uses: >- # v4.0.0
-          actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392
+        uses: >- # v4.4.0
+          actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       - name: Upload to code-scanning
-        uses: >- # v3.22.11
-          github/codeql-action/upload-sarif@b374143c1149a9115d881581d29b8390bbcbb59c
+        uses: >- # v3.26.6
+          github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93
         with:
           sarif_file: results.sarif