CCM-9336: Bump github/codeql-action/upload-sarif from 4.37.7 to 4.38.0 #1108
Triggered via pull request
September 14, 2026 02:14
dependabot[bot]
Status
Startup failure
Total duration
–
Artifacts
–
cicd-1-pull-request.yaml
on: pull_request
Set CI/CD metadata
Commit stage
/
Check English usage
Commit stage
/
Check Markdown format
Commit stage
/
Check TODO usage
Commit stage
/
Check file format
Commit stage
/
Count lines of code
Commit stage
/
Scan dependencies
Commit stage
/
Scan secrets
Commit stage
/
Validate action SHA pins
Commit stage
/
Lint Terraform
Commit stage
/
Run terraform-docs
Build stage
/
Artefact 1
Build stage
/
Artefact n
Build stage
/
Build Docs
Publish stage
/
Publish packages
Acceptance stage
/
Accessibility test
Acceptance stage
/
Contract test
Acceptance stage
/
Integration test
Acceptance stage
/
Load test
Acceptance stage
/
Security test
Acceptance stage
/
UI performance test
Acceptance stage
/
UI test
Acceptance stage
/
Environment tear down
Annotations
1 error
|
Invalid workflow file:
.github/workflows/cicd-1-pull-request.yaml#L90
The workflow is not valid. .github/workflows/cicd-1-pull-request.yaml (Line: 90, Col: 3): Error calling workflow 'NHSDigital/nhs-notify-shared-modules/.github/workflows/stage-1-commit.yaml@28a80ab9142270a208f085251581fdf5a1c7035c'. The nested job 'count-lines-of-code' is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'. .github/workflows/cicd-1-pull-request.yaml (Line: 90, Col: 3): Error calling workflow 'NHSDigital/nhs-notify-shared-modules/.github/workflows/stage-1-commit.yaml@28a80ab9142270a208f085251581fdf5a1c7035c'. The nested job 'scan-dependencies' is requesting 'pull-requests: read', but is only allowed 'pull-requests: none'.
|