Skip to content

ci(deps): bump github/codeql-action from 3.28.18 to 4.33.0

c9f2eff
Select commit
Loading
Failed to load commit list.
Closed

ci(deps): bump github/codeql-action from 3.28.18 to 4.33.0 #643

ci(deps): bump github/codeql-action from 3.28.18 to 4.33.0
c9f2eff
Select commit
Loading
Failed to load commit list.
Debricked / Vulnerability analysis completed Mar 20, 2026 in 12s

An automation triggered a pipeline warning

Found 1 vulnerabilities. An additional 0 vulnerabilities have been marked as unaffected.

Output from Automations

6 rules were checked:


If a new dependency is added where the license risk is at least medium

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected and which has not triggered this rule for this dependency before

then notify all users in the group admins by email

✔️ The rule did not trigger. Manage rule



If there is a dependency where the license risk is at least high

then send a pipeline warning

✔️ The rule did not trigger. Manage rule



If a new dependency is added where the license risk is at least high

then fail pipeline

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected 
where CVSS is at least critical (9.0-10.0)

then fail pipeline

✔️ The rule did not trigger. Manage rule



If a dependency contains a vulnerability which has not been marked as unaffected

then send a pipeline warning

⚠️ The rule triggered for the following vulnerabilities, causing a pipeline warning. Manage rule

Vulnerability CVSS2 CVSS3 CVSS4 Dependency Dependency Licenses
CVE-2026-25934 N/A 4.3 N/A github.com/go-git/go-git/v5 (Go) Apache-2.0