build(codeql): coordinate CodeQL Action 4.37.8 lifecycle - #1026

Closed

dependabot[bot] wants to merge 24 commits into

dependabot/github_actions/develop/github/codeql-action/init-4.37.8

Commits on Aug 25, 2026

build(deps): bump github/codeql-action/init from 4.37.0 to 4.37.8
dependabot[bot]
authored
4a3ff13

Commits on Aug 26, 2026

test(codeql): require coordinated action versions
seonghobae
committed
661afd3
fix(codeql): keep action components aligned
seonghobae
committed
9532f27
test(codeql): require coordinated SARIF uploader release
seonghobae
committed
ffcc758
fix(codeql): align Scorecard SARIF uploader release
seonghobae
committed
b8c1d1d
fix(codeql): align Trivy SARIF uploader release
seonghobae
committed
871ac35
test(dependabot): require existing CI/CD label
seonghobae
committed
d2b7097
fix(dependabot): use existing CI/CD label
seonghobae
committed
9fc32ab
fix(codeql): normalize contract import spacing
seonghobae
committed
481766c
fix(codeql): normalize SARIF contract spacing
seonghobae
committed
19484ed

Commits on Aug 28, 2026

Commits on Sep 1, 2026

test(scorecard): reproduce missing PR code-scanning evidence
seonghobae
committed
be5fd37
fix(scorecard): emit SARIF for pull-request heads
seonghobae
committed
4b9050d
fix(scorecard): restore default-branch publish guard
seonghobae
committed
d50df53
test(scorecard): align PR publish guard contract
seonghobae
committed
e6ea024
test(trivy): add PR scan contract verifier
seonghobae
committed
046e221
test(trivy): preserve PR scan regressions
seonghobae
committed
06d93ae
test(trivy): gate quickcheck on PR scan wiring
seonghobae
committed
0913edf
fix(trivy): scan protected pull-request heads
seonghobae
committed
c1f8ccb
chore(codeql): drop Trivy regression from canonical lifecycle lane
seonghobae
committed
a3507bf
chore(codeql): remove duplicate Trivy verifier lane
seonghobae
committed
513f051
chore(codeql): restore Trivy ownership boundary
seonghobae
committed
ef6f3b1
chore(codeql): remove duplicate Trivy quickcheck wiring
seonghobae
committed
c0d4ebc