update actions/checkout version (#2579)

khorne3 · web-flow · commit 06f56f6c997c · 2026-04-23T08:12:49.000-04:00
* update actions/checkout version

* fix broken link

* simplify link

* remove outbound links
diff --git a/docs/kb/semgrep-ci/github-repository-rulesets-semgrep.md b/docs/kb/semgrep-ci/github-repository-rulesets-semgrep.md
@@ -63,7 +63,7 @@ jobs:
     if: (github.actor != 'dependabot[bot]') && (github.event != 'merge_group')
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - run: semgrep ci
         env:
           SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
diff --git a/docs/kb/semgrep-ci/github-upload-findings-in-security-dashboard.md b/docs/kb/semgrep-ci/github-upload-findings-in-security-dashboard.md
@@ -63,7 +63,7 @@ jobs:
       actions: read
       contents: read
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - run: semgrep ci --sarif > semgrep.sarif
         env:
           SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
diff --git a/docs/kb/semgrep-ci/scan-monorepo-in-parts.md b/docs/kb/semgrep-ci/scan-monorepo-in-parts.md
@@ -113,7 +113,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci --subdir=src/moduleA/
         env:
@@ -162,7 +162,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci --include=src/moduleA/
         env:
diff --git a/docs/kb/semgrep-ci/trigger-diff-scans-env-var.md b/docs/kb/semgrep-ci/trigger-diff-scans-env-var.md
@@ -109,7 +109,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci
         env:
diff --git a/docs/kb/semgrep-ci/using-nonroot-docker-image-with-gha.md b/docs/kb/semgrep-ci/using-nonroot-docker-image-with-gha.md
@@ -47,7 +47,7 @@ jobs:
     name: semgrep/ci
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Run Semgrep
         run: |
 
diff --git a/docs/kb/semgrep-supply-chain/ssc-python-lockfiles.md b/docs/kb/semgrep-supply-chain/ssc-python-lockfiles.md
@@ -144,7 +144,7 @@ jobs:
     name: requirementsGeneration
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Generate requirements txt
         run: |
           pip3 install pip-tools
@@ -163,7 +163,7 @@ jobs:
     container:
       image: semgrep/semgrep
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Download artifact from previous job
         uses: actions/download-artifact@v4
         with:
diff --git a/docs/learn/vulnerabilities/command-injection/github-actions-injection.md b/docs/learn/vulnerabilities/command-injection/github-actions-injection.md
@@ -168,7 +168,7 @@ jobs:
       contents: read
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
       - name: install 
         run: npm install
 
diff --git a/docs/semgrep-ci/packages-in-semgrep-docker.md b/docs/semgrep-ci/packages-in-semgrep-docker.md
@@ -29,7 +29,7 @@ The Alpine 3.22 docker image includes additional packages that can change withou
     container: semgrep/semgrep:latest
     runs-on: ubuntu-latest-16-core
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       - name: Install dependencies
         run: apk add bash jq curl
       - run: semgrep scan --json ... | jq ...
diff --git a/docs/semgrep-supply-chain/setup-maven.md b/docs/semgrep-supply-chain/setup-maven.md
@@ -77,7 +77,7 @@ jobs:
   buildmavenDepTree:
       runs-on: ubuntu-latest
       steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up JDK 11
         uses: actions/setup-java@v3
         with:
@@ -102,7 +102,7 @@ jobs:
     container:
       image: semgrep/semgrep
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Download artifact from the previous job
         uses: actions/download-artifact@v3
         with:
@@ -133,7 +133,7 @@ jobs:
   buildmavenDepTree:
       runs-on: ubuntu-latest
       steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Set up JDK 17
         uses: actions/setup-java@v3
         with:
@@ -157,7 +157,7 @@ jobs:
     container:
       image: semgrep/semgrep
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Download artifact from previous job
         uses: actions/download-artifact@v3
         with:
diff --git a/docs/troubleshooting/semgrep-app.md b/docs/troubleshooting/semgrep-app.md
@@ -67,7 +67,7 @@ jobs:
       image: semgrep/semgrep
     if: (github.actor != 'dependabot[bot]')
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
       # Use this command for the verbose level of debugging.
       - run: semgrep ci --verbose &> semgrep.log
       # Use this command for the Semgrep's highest logging level, --debug.
@@ -143,10 +143,6 @@ variables:
   SECURE_LOG_LEVEL: "debug"
 ```
 
-### How to get GitLab assistance
-
-If you’re a GitLab customer and suspect there’s an issue with GitLab, please [contact GitLab support](https://about.gitlab.com/support/) and open a support ticket. Users of GitLab’s free plans should open a thread in the [GitLab Community Forum](https://forum.gitlab.com).
-
 ## Project-specific issues
 
 A **project** is any repository you have added to Semgrep Cloud Platform for scanning. Refer to the following sections for issues in the **Semgrep AppSec Platform > Projects** page.
diff --git a/docs/writing-rules/private-rules.md b/docs/writing-rules/private-rules.md
@@ -96,7 +96,7 @@ The following sample of the GitHub Actions workflow publishes rules from a priva
         container:
           image: semgrep/semgrep
         steps:
-        - uses: actions/checkout@v4
+        - uses: actions/checkout@v6
         - name: publish private semgrep rules
           run: semgrep publish --visibility=org_private ./private_rule_dir
           env:
diff --git a/src/components/code_snippets/_gha-semgrep-app-sast-dash.mdx b/src/components/code_snippets/_gha-semgrep-app-sast-dash.mdx
@@ -38,7 +38,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci --sarif > semgrep.sarif
         env:
diff --git a/src/components/code_snippets/_gha-semgrep-app-sast.mdx b/src/components/code_snippets/_gha-semgrep-app-sast.mdx
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep ci" command on the command line of the docker image.
       - run: semgrep ci
         env:
diff --git a/src/components/code_snippets/_gha-semgrep-oss-sast.mdx b/src/components/code_snippets/_gha-semgrep-oss-sast.mdx
@@ -40,7 +40,7 @@ jobs:
 
     steps:
       # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Run the "semgrep scan" command on the command line of the docker image.
       - run: semgrep scan --config auto
 ```
diff --git a/src/components/reference/_block-findings-errors-configs.mdx b/src/components/reference/_block-findings-errors-configs.mdx
@@ -15,7 +15,7 @@ Optionally, you can explicitly indicate that Semgrep is using the default settin
  
 ```yaml
 steps:
-  - uses: actions/checkout@v4
+  - uses: actions/checkout@v6
   - name: Scan and suppress internal errors
     run: semgrep ci --suppress-errors
 ```
@@ -36,7 +36,7 @@ The following code snippets display the position of the default flag in the conf
 
 ```yaml
 steps:
-- uses: actions/checkout@v4
+- uses: actions/checkout@v6
 - name: Scan and suppress internal errors
    run: semgrep ci --suppress-errors
 ```
