search

FociSolutions / github-foundations

A framework for managing your GitHub Enterprise account infrastructure.
MIT License
10 stars 1 forks source link

[Chore] Step Security Harden Runner scripts have outdated dependencies #116

Closed bzarboni1 closed 2 months ago

bzarboni1 commented 2 months ago

ISSUE

The Scorecard analysis and dependency review jobs have outdated dependencies:

Deprecation notice: v1, v2, and v3 of the artifact actions
The following artifacts were uploaded using a version of actions/upload-artifact that is scheduled for deprecation: "SARIF file".
Please update your workflow to use v4 of the artifact actions.
Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
Scorecard analysis
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744, actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32, github/codeql-action/upload-sarif@d958b976dc5b990f802df244f2dc5d807113327f. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Scorecard analysis
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

All three need to be updated.