Skip to content

Publish SBOM + provenance and enable reproducible, GPG-signed releases #452

Publish SBOM + provenance and enable reproducible, GPG-signed releases

Publish SBOM + provenance and enable reproducible, GPG-signed releases #452

Triggered via pull request July 20, 2026 22:59
Status Success
Total duration 1m 59s
Artifacts –

codeql.yml

on: pull_request
Matrix: analyze
Fit to window
Zoom out
Zoom in

Annotations

4 warnings
Analyze (actions)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, github/codeql-action/analyze@02c5e83432fe5497fd85b873b6c9f16a8578e1d9, github/codeql-action/init@02c5e83432fe5497fd85b873b6c9f16a8578e1d9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Analyze (actions)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
Analyze (java-kotlin)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9, github/codeql-action/analyze@02c5e83432fe5497fd85b873b6c9f16a8578e1d9, github/codeql-action/init@02c5e83432fe5497fd85b873b6c9f16a8578e1d9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Analyze (java-kotlin)
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/