Updating to common GitHub Action 1.0.5 #1888
Open
+3
−2
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.



This pull request updates the CI workflow configuration to enable additional security scanning and improve language specification for analysis. The most significant changes are related to enabling BlackDuck Polaris scans and clarifying the language used for build and analysis.
Description
This pull request updates the CI workflow configuration in
.github/workflows/ci-main-pull-request-stub.ymlto improve security scanning and ensure correct build settings. The most important changes are:Security and scanning improvements:
perform-blackduck-polaristotrueto ensure security checks are performed during CI runs.Build and analysis settings:
languageparameter to'ruby'to specify the project's primary language for build and SonarQube analysis.STUB_VERSIONenvironment variable from"1.0.4"to"1.0.5"to reflect the latest stub version.Types of changes
Checklist:
Gemfile.lockhas changed, I have used--conservativeto do it and included the full output in the Description above.