Add Trivy scan and update GitHub Actions versions

77alf77 · Aug 2, 2024 · f20d25c · f20d25c
1 parent fc259f3
commit f20d25c
Showing 1 changed file with 3 additions and 8 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   build:
-    name: Build
+    name: Build and Analyze
     runs-on: ubuntu-latest
 
     steps:
@@ -25,14 +25,9 @@ jobs:
         run: ./gradlew build
 
       - name: Set up CodeQL
-        uses: github/codeql-action/setup@v2
+        uses: github/codeql-action/setup@v3
         with:
           languages: java
 
-      - name: Initialize CodeQL database
-        uses: github/codeql-action/autobuild@v2
-
       - name: Analyze code with CodeQL
-        uses: github/codeql-action/analyze@v2
-        with:
-          category: 'security'
+        uses: github/codeql-action/analyze@v3