ci: adhere to action restriction when uploading scorecard (#2771)

This commit is contained in:
Moritz Sanft 2023-12-22 13:13:20 +01:00 committed by GitHub
parent 436e7c6d3b
commit 5871ff5508
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -30,12 +30,11 @@ jobs:
publish_results: true publish_results: true
- name: Upload artifact - name: Upload artifact
uses: ./.github/actions/artifact_upload uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with: with:
name: SARIF file name: SARIF file
path: results.sarif path: results.sarif
retention-days: 5 retention-days: 5
encryptionSecret: ${{ secrets.ARTIFACT_ENCRYPT_PASSWD }}
- name: Upload to code-scanning - name: Upload to code-scanning
uses: github/codeql-action/upload-sarif@fdcae64e1484d349b3366718cdfef3d404390e85 # v2.22.1 uses: github/codeql-action/upload-sarif@fdcae64e1484d349b3366718cdfef3d404390e85 # v2.22.1