From cd9608132b18d811ad133c296b33eb23460df53f Mon Sep 17 00:00:00 2001 From: Anton Patsev <10828883+patsevanton@users.noreply.github.com> Date: Tue, 21 Jan 2025 08:54:39 +0600 Subject: [PATCH] Pin Checkov action to major version v12 to reduce Dependabot noise **Git Commit Name:** "Pin Checkov action to major version v12 to reduce Dependabot noise" **Description:** This PR pins the Checkov action to the major version `v12` instead of a specific patch version (`v12.2943.0`). This change is made to reduce the frequency of Dependabot pull requests for minor or patch updates, as we are comfortable using the latest stable version within the `v12` major release. **Changes:** - Updated `uses: bridgecrewio/checkov-action@v12.2943.0` to `uses: bridgecrewio/checkov-action@v12` in `.github/workflows/pipeline.yml`. **Reason for Change:** - Dependabot has been creating frequent MRs for minor and patch updates, which adds unnecessary noise. By pinning to the major version, we can still benefit from updates while reducing the maintenance overhead. --- .github/workflows/pipeline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index e3c32e6..ee89d1f 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -60,7 +60,7 @@ jobs: soft_fail: true - name: Test code with Checkov - uses: bridgecrewio/checkov-action@v12.2941.0 + uses: bridgecrewio/checkov-action@v12 with: directory: / framework: terraform