BC-6589 update gh-actions

[Loki-Afro]

Description

Links to Tickets or other pull requests

https://ticketsystem.dbildungscloud.de/browse/BC-6589
#4771
hpi-schul-cloud/schulcloud-client#3414
hpi-schul-cloud/nuxt-client#3112
hpi-schul-cloud/superhero-dashboard#250
hpi-schul-cloud/schulcloud-calendar#157
hpi-schul-cloud/antivirus_check_service#52
hpi-schul-cloud/version-aggregator#19
hpi-schul-cloud/dof_app_deploy#798
hpi-schul-cloud/h5p-staticfiles-server#9
hpi-schul-cloud/tldraw-client#58

Changes

Datasecurity

Deployment

New Repos, NPM pakages or vendor scripts

Approval for review

• DEV: If api was changed - generate-client:server was executed in vue frontend and changes were tested and put in a PR with the same branch name.
• QA: In addition to review, the code has been manually tested (if manual testing is possible)
• All points were discussed with the ticket creator, support-team or product owner. The code upholds all quality guidelines from the PR-template.

Notice: Please remove the WIP label if the PR is ready to review, otherwise nobody will review it.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 42df4af.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Manifest Files

.github/workflows/codeql-analysis.yml

• github/codeql-action/analyze@3.*.*
• github/codeql-action/autobuild@3.*.*
• github/codeql-action/init@3.*.*
• github/codeql-action/analyze@2.*.*
• github/codeql-action/autobuild@2.*.*
• github/codeql-action/init@2.*.*

.github/workflows/dependency-review.yml

• actions/dependency-review-action@4.*.*
• actions/dependency-review-action@3.*.*

.github/workflows/migrations.yml

• supercharge/[email protected]
• supercharge/[email protected]

.github/workflows/push.yml

• aquasecurity/trivy-action@1f6384b
• docker/login-action@3.*.*
• github/codeql-action/upload-sarif@3.*.*
• hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@bc-6589
• aquasecurity/trivy-action@9ab158e
• docker/login-action@2.*.*
• github/codeql-action/upload-sarif@2.*.*
• hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@main

.github/workflows/tag.yml

• aquasecurity/trivy-action@1f6384b
• docker/login-action@3.*.*
• aquasecurity/trivy-action@e5f4313
• docker/login-action@2.*.*

.github/workflows/test.yml

• actions/download-artifact@4.*.*
• actions/setup-java@4.*.*
• actions/upload-artifact@4.*.*
• supercharge/[email protected]
• actions/download-artifact@3.*.*
• actions/setup-java@3.*.*
• actions/upload-artifact@3.*.*
• supercharge/[email protected]

.github/workflows/test_unstable_e2e.yml

• actions/upload-artifact@4.*.*
• actions/upload-artifact@3.*.*

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud