diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 78752e69f..44bc2df20 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -32,7 +32,7 @@ jobs: - name: Checkout repository uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Initialize CodeQL - uses: github/codeql-action/init@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/init@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10 with: languages: ${{ matrix.language }} - name: 'Install' @@ -49,6 +49,6 @@ jobs: - name: 'Build' run: cmake --build 'build' --verbose --parallel 4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/analyze@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/openssf_scorecard.yml b/.github/workflows/openssf_scorecard.yml index d6671cbbc..ba43cd0ac 100644 --- a/.github/workflows/openssf_scorecard.yml +++ b/.github/workflows/openssf_scorecard.yml @@ -36,6 +36,6 @@ jobs: path: results.sarif retention-days: 5 - name: 'Upload Results' - uses: github/codeql-action/upload-sarif@2e230e8fe0ad3a14a340ad0815ddb96d599d2aff # v3.25.8 + uses: github/codeql-action/upload-sarif@23acc5c183826b7a8a97bce3cecc52db901f8251 # v3.25.10 with: sarif_file: results.sarif