@@ -45,16 +45,16 @@ jobs:
45
45
46
46
steps :
47
47
- name : Harden Runner
48
- uses : step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10 # v2.8.0
48
+ uses : step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
49
49
with :
50
50
egress-policy : audit
51
51
52
52
- name : Checkout repository
53
- uses : actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
53
+ uses : actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
54
54
55
55
# Initializes the CodeQL tools for scanning.
56
56
- name : Initialize CodeQL
57
- uses : github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
57
+ uses : github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
58
58
with :
59
59
languages : ${{ matrix.language }}
60
60
# If you wish to specify custom queries, you can do so here or in a config file.
68
68
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
69
69
# If this step fails, then you should remove it and run the build manually (see below)
70
70
- name : Autobuild
71
- uses : github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
71
+ uses : github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
72
72
73
73
# ℹ️ Command-line programs to run using the OS shell.
74
74
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
81
81
# ./location_of_script_within_repo/buildscript.sh
82
82
83
83
- name : Perform CodeQL Analysis
84
- uses : github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f # v3.25.7
84
+ uses : github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
85
85
with :
86
86
category : " /language:${{matrix.language}}"
0 commit comments