diff --git a/.checkov.yml b/.checkov.yml new file mode 100644 index 0000000..63bfa27 --- /dev/null +++ b/.checkov.yml @@ -0,0 +1,7 @@ +# See: https://www.checkov.io/1.Welcome/Quick%20Start.html + +compact: true +quiet: true +skip-path: + - coverage + - node_modules diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml index dff65b7..7486f4a 100644 --- a/.github/workflows/check-dist.yml +++ b/.github/workflows/check-dist.yml @@ -66,7 +66,7 @@ jobs: - if: ${{ failure() && steps.diff.outcome == 'failure' }} name: Upload Artifact id: upload - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: dist path: dist/ diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 96d94b4..820be1f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -34,7 +34,7 @@ jobs: - name: Initialize CodeQL id: initialize - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: config-file: .github/codeql/codeql-config.yml languages: ${{ matrix.language }} @@ -42,8 +42,8 @@ jobs: - name: Autobuild id: autobuild - uses: github/codeql-action/autobuild@v3 + uses: github/codeql-action/autobuild@v4 - name: Perform CodeQL Analysis id: analyze - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index 6b9ef0f..c199bb4 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -45,6 +45,7 @@ jobs: id: super-linter uses: super-linter/super-linter/slim@v8 env: + CHECKOV_FILE_NAME: .checkov.yml DEFAULT_BRANCH: main FILTER_REGEX_EXCLUDE: dist/**/* GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}