Merge pull request #358 from OADA/dependabot/github_actions/github/codeql-action-4

Author: awlayton

.github/workflows/build-and-push-services.yml

@@ -345,7 +345,7 @@ jobs:
           githubToken: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file to GitHub Code Scanning
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ./securecodewarrior.sarif
           #sarif_file: ./snyk.sarif

.github/workflows/semgrep-analysis.yml

@@ -58,7 +58,7 @@ jobs:
         if: always()
 
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ./securecodewarrior.sarif
         if: always()