MobSF / mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
GNU Lesser General Public License v3.0
607 stars 97 forks source link

CodeQL Action Deprecation #61

Closed sathish-kishore closed 1 year ago

sathish-kishore commented 1 year ago

Error: This version of the CodeQL Action was deprecated on January 18th, 2023, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v2. For more information, see https://github.blog/changelog/2023-01-18-code-scanning-codeql-action-v1-is-now-deprecated/

Error: codeql/upload-sarif action failed: HttpError: Resource not accessible by integration

sathish-kishore commented 1 year ago
Screenshot 2023-05-12 at 3 44 32 PM
sathish-kishore commented 1 year ago

These entries need to be replaced with their v2 equivalents:

github/codeql-action/init@v2 github/codeql-action/autobuild@v2 github/codeql-action/analyze@v2 github/codeql-action/upload-sarif@v2

ajinabraham commented 1 year ago

Thanks for reporting. Updated the GitHub actions documentation.