build(deps): bump github.com/88labs/go-utils/aws from 0.150.0 to 0.150.1 in /envlookup #689

	# PR単位で差分があるファイルに対してSemgrep(SASTツール)を実行し、
	# 脆弱性につながる可能性のある記述をPRコメントで指摘するワークフローです
	# 詳細は以下のドキュメントをご参照ください
	# https://andpad-dev.esa.io/posts/8984

	name: semgrep

	on:
	pull_request

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	semgrep:
	name: semgrep
	runs-on: ubuntu-22.04
	# Skip any PR created by dependabot to avoid permission issues
	if: (github.actor != 'dependabot[bot]')
	steps:
	- name: Check out code
	uses: actions/checkout@v4 # v3.5.3
	with:
	fetch-depth: 0
	- uses: reviewdog/action-setup@e04ffabe3898a0af8d0fb1af00c188831c4b5893 # v1.3.2
	- id: changed-files
	uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
	- id: run-semgrep
	if: steps.changed-files.outputs.all_changed_files_count != '0'
	name: Run semgrep
	env:
	REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	run: \|
	docker run \
	-v $(pwd):/workdir \
	--workdir /workdir \
	semgrep/semgrep:pro-sha-511dd7ce3c1b7f2f35a4bf9422d3f81ffbe2a688@sha256:fdd6eb7b18182d42817b4dc7ab7112856d2a6183f019de9e32dda0cf022eb575 \
	semgrep scan --config auto --severity WARNING --json ${{ steps.changed-files.outputs.all_changed_files }} \
	\| jq -r '.results[] \| "\(.path):\(.start.line):\(.start.col): \(.extra.message)"' \
	\| sed 's#^/workdir/##' \
	\| reviewdog \
	-efm="%f:%l:%c: %m" \
	-diff="git diff FETCH_HEAD" \
	-level=warning \
	-reporter=github-pr-review

Provide feedback