@@ -41,16 +41,16 @@ jobs:
41
41
42
42
steps :
43
43
- name : Harden Runner
44
- uses : step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7 .0
44
+ uses : step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8 .0
45
45
with :
46
46
egress-policy : audit # TODO: change to 'egress-policy: block' after couple of runs
47
47
48
48
- name : Checkout repository
49
- uses : actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
49
+ uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
50
50
51
51
# Initializes the CodeQL tools for scanning.
52
52
- name : Initialize CodeQL
53
- uses : github/codeql-action/init@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
53
+ uses : github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
54
54
with :
55
55
languages : ${{ matrix.language }}
56
56
# If you wish to specify custom queries, you can do so here or in a config file.
60
60
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
61
61
# If this step fails, then you should remove it and run the build manually (see below)
62
62
- name : Autobuild
63
- uses : github/codeql-action/autobuild@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
63
+ uses : github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
64
64
65
65
# ℹ️ Command-line programs to run using the OS shell.
66
66
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
73
73
# ./location_of_script_within_repo/buildscript.sh
74
74
75
75
- name : Perform CodeQL Analysis
76
- uses : github/codeql-action/analyze@d39d31e687223d841ef683f52467bd88e9b21c14 # v3.25.3
76
+ uses : github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
77
77
with :
78
78
category : " /language:${{matrix.language}}"
0 commit comments