diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9e8aff33d..28d1f9f0b 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -32,7 +32,7 @@ jobs: - name: Checkout repository uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Initialize CodeQL - uses: github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/init@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0 with: languages: ${{ matrix.language }} - name: 'Install' @@ -49,6 +49,6 @@ jobs: - name: 'Build' run: cmake --build 'build' --verbose --parallel 4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/analyze@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/openssf_scorecard.yml b/.github/workflows/openssf_scorecard.yml index 57d8b7481..434ded70b 100644 --- a/.github/workflows/openssf_scorecard.yml +++ b/.github/workflows/openssf_scorecard.yml @@ -36,6 +36,6 @@ jobs: path: results.sarif retention-days: 5 - name: 'Upload Results' - uses: github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12 + uses: github/codeql-action/upload-sarif@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0 with: sarif_file: results.sarif