update workflow templates to latest versions

Author: shubham-stepsecurity

testfiles/addworkflow/expected-codeql.yml

@@ -41,7 +41,7 @@ jobs:
 
  steps:
  - name: Checkout repository
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

testfiles/addworkflow/expected-dependency-review.yml

@@ -17,6 +17,6 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: 'Checkout Repository'
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  - name: 'Dependency Review'
- uses: actions/dependency-review-action@v2
+ uses: actions/dependency-review-action@v4

testfiles/addworkflow/expected-scorecards.yml

@@ -31,12 +31,12 @@ jobs:
 
  steps:
  - name: "Checkout code"
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  with:
  persist-credentials: false
 
  - name: "Run analysis"
- uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
+ uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
  with:
  results_file: results.sarif
  results_format: sarif
@@ -58,7 +58,7 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
  name: SARIF file
  path: results.sarif

workflow-templates/codeql.yml

@@ -41,7 +41,7 @@ jobs:
 
  steps:
  - name: Checkout repository
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
 
  # Initializes the CodeQL tools for scanning.
  - name: Initialize CodeQL

workflow-templates/dependency-review.yml

@@ -17,6 +17,6 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: 'Checkout Repository'
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  - name: 'Dependency Review'
- uses: actions/dependency-review-action@v2
+ uses: actions/dependency-review-action@v4

workflow-templates/scorecards.yml

@@ -31,12 +31,12 @@ jobs:
 
  steps:
  - name: "Checkout code"
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
  with:
  persist-credentials: false
 
  - name: "Run analysis"
- uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
+ uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
  with:
  results_file: results.sarif
  results_format: sarif
@@ -58,7 +58,7 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
  with:
  name: SARIF file
  path: results.sarif