Skip to content

.github/workflows: convert dependabump to re-usable workflow - #22858

Merged
jmank88 merged 3 commits into
developfrom
CRE-4302-dependabump
Jul 27, 2026
Merged

.github/workflows: convert dependabump to re-usable workflow#22858
jmank88 merged 3 commits into
developfrom
CRE-4302-dependabump

Update .github/workflows/dependabump.yml

973eac3
Select commit
Loading
Failed to load commit list.
CL-sonarqube-production / SonarQube Code Analysis failed Jul 24, 2026 in 1m 8s

Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube

Annotations

Check warning on line 18 in .github/workflows/dependabump.yml

See this annotation in the file changed.

@cl-sonarqube-production cl-sonarqube-production / SonarQube Code Analysis

Use full commit SHA hash for this dependency. 

[S7637] Using external GitHub actions and workflows without a commit reference is security-sensitive
 See more on https://sonarqube.main.prod.cldev.sh/project/issues?id=smartcontractkit_chainlink&pullRequest=22858&issues=160d7a01-055e-4a64-a77c-7da0e4a88579&open=160d7a01-055e-4a64-a77c-7da0e4a88579
View more details on CL-sonarqube-production