Skip to content

fix(ci): update Bandit workflow actions for Node.js 24 and CodeQL deprecations - #195

Merged
CoreOxide merged 1 commit into
mainfrom
fix/bandit-actions-deprecation
Sep 12, 2026
Merged

CoreOxide merged 1 commit into
mainfrom
fix/bandit-actions-deprecation

Conversation

@CoreOxide

Copy link
Copy Markdown
Owner

Summary

Fixes 1 error and 1 warning reported during the Bandit security workflow scan:

  1. Error: CodeQL Action major versions v1 and v2 have been deprecated.
    • Bumped shundor/python-bandit-scan to commit 9955228c1cbdc5aeb5e511e0fa232154e2ed2b67 (uses upload-sarif@v4 and upload-artifact@v7).
  2. Warning: Node.js 20 is deprecated.
    • Bumped actions/github-script from @v7 to @v8 (Node 24).
    • Bumped shundor/python-bandit-scan internal steps run on Node 24.

Changes

  • .github/workflows/bandit.yml

@CoreOxide
CoreOxide requested a review from ytupman as a code owner September 12, 2026 17:22
@CoreOxide
CoreOxide merged commit 53551fa into main Sep 12, 2026
7 checks passed
@CoreOxide
CoreOxide deleted the fix/bandit-actions-deprecation branch September 12, 2026 17:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant