ci: Bump CodeQL / upload-sarif action #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

rvolykh merged 1 commit into main from ci/bump-codeql-action

Dec 18, 2025

Merged

ci: Bump CodeQL / upload-sarif action

Annotations

10 errors and 1 warning

CKV_AWS_173: "Check encryption settings for Lambda environmental variable"

CKV_AWS_50: "X-Ray tracing is enabled for Lambda"

CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"

CKV_AWS_117: "Ensure that AWS Lambda function is configured inside a VPC"

CKV_AWS_26: "Ensure all data stored in the SNS topic is encrypted"

CKV_AWS_26: "Ensure all data stored in the SNS topic is encrypted"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"

Restore cache failed: Dependencies file is not found in /home/runner/work/telegram-bot/telegram-bot. Supported file pattern: go.sum