CI Pull Request on Main Branch

Bump github/codeql-action from 4.37.6 to 4.37.7 #2268

Sign in to view logs

Triggered via pull request August 17, 2026 04:36

dependabot[bot]

opened #10530

dependabot/github_actions/github/codeql-action-4.37.7

Status Success

Total duration 1m 46s

Artifacts 6

ci-main-pull-request-stub.yml

on: pull_request

call-ci-main-pr-check-pipeline / Checkout repository

Echo stub version

call-ci-main-pr-check-pipeline / Pre-compilation checks

Generate Multi-Platform SBOM and Import to BlackDuck

call-ci-main-pr-check-pipeline / Build/compilation and unit tests (CI)

call-ci-main-pr-check-pipeline / ... / Export SBOM from GitHub Dependency Graph API

call-ci-main-pr-check-pipeline / ... / Blackduck SCA Scan (PURPLE)

call-ci-main-pr-check-pipeline / ... / Generate MSFT SBOM

call-ci-main-pr-check-pipeline / ... / license_scout

call-ci-main-pr-check-pipeline / ... / Build and upload Docker image

call-ci-main-pr-check-pipeline / ... / Complexity and SLOC generation

call-ci-main-pr-check-pipeline / Language-specific pre-compilation steps and linting

call-ci-main-pr-check-pipeline / Language-agnostic pre-compilation steps

call-ci-main-pr-check-pipeline / ... / Trufflehog

call-ci-main-pr-check-pipeline / Grype scan

call-ci-main-pr-check-pipeline / ... / BlackDuck Polaris SAST scan

call-ci-main-pr-check-pipeline / ... / Grype scan (Linux)

call-ci-main-pr-check-pipeline / ... / Grype scan (MacOS)

call-ci-main-pr-check-pipeline / ... / Grype scan (Windows)

call-ci-main-pr-check-pipeline / Creating packaged binaries

call-ci-main-pr-check-pipeline / Detect SBOM version for application

Matrix: call-ci-main-pr-check-pipeline / Unit tests

call-ci-main-pr-check-pipeline / ... / irfan

call-ci-main-pr-check-pipeline / ... / Grype vulnerability scan

call-ci-main-pr-check-pipeline / ... / Wiz CLI container image scan

call-ci-main-pr-check-pipeline / Creating Habitat packages

call-ci-main-pr-check-pipeline / Publishing Habitat packages to Builder

call-ci-main-pr-check-pipeline / Publishing packages

call-ci-main-pr-check-pipeline / Grype scan of Habitat packages

call-ci-main-pr-check-pipeline / Grype scan of Habitat packages (Windows)

Annotations

2 warnings

call-ci-main-pr-check-pipeline / Generating SBOM / Export SBOM from GitHub Dependency Graph API

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

call-ci-main-pr-check-pipeline / Source code complexity checks / Complexity and SLOC generation

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime

Name	Size	Digest
cyclonedx-sbom-all-platforms	83.3 KB	`sha256:f1f97b5347cac64a9c749e384c719947b482d3d157249b98c51e349569cd6eea`
habitat-sh-habitat-10530-merge--20260817043633-GitHub-sbom.csv	18.2 KB	`sha256:aeaa5e2b62b13ccd86beee478532c9d907774c8fa46a704f4b5baeb73f383806`
habitat-sh-habitat-10530-merge-20260817043649-scc-complexity.html	24.9 KB	`sha256:c5886ece30f17be664bc07a0b5a28c694c7ec8aada02936380ecff1752fce311`
habitat-sh-habitat-10530-merge-20260817043649-scc-complexity.json	32.1 KB	`sha256:8eb952d944bdfd7e6bb03cd19f677316f4f9fd9e86f5bc08105331e6322fc06b`
habitat-sh-habitat-10530-merge-20260817043649-scc-complexity.txt	1.14 KB	`sha256:ed8800ae0e98ab2debb024b4de120248269f383ea55c0013a679e443ad8ebce0`
habitat-sh-habitat-20260817043633-GitHub-sbom.json	48.7 KB	`sha256:3ae88d9a132a465bb50658a6201229993c2df933404282cb95bea46c978fc5b5`