diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index fb492a2..6cf1439 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,10 +29,10 @@ jobs: - name: 'Checkout' uses: 'actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab' - name: 'Initialize CodeQL' - uses: 'github/codeql-action/init@0225834cc549ee0ca93cb085b92954821a145866' + uses: 'github/codeql-action/init@83f0fe6c4988d98a455712a27f0255212bba9bd4' with: languages: '${{ matrix.language }}' - name: 'Autobuild' - uses: 'github/codeql-action/autobuild@0225834cc549ee0ca93cb085b92954821a145866' + uses: 'github/codeql-action/autobuild@83f0fe6c4988d98a455712a27f0255212bba9bd4' - name: 'Perform CodeQL Analysis' - uses: 'github/codeql-action/analyze@0225834cc549ee0ca93cb085b92954821a145866' + uses: 'github/codeql-action/analyze@83f0fe6c4988d98a455712a27f0255212bba9bd4' diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 676bf5e..d0590f1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -29,6 +29,6 @@ jobs: repo_token: '${{ secrets.GITHUB_TOKEN }}' publish_results: false - name: 'Upload SARIF file' - uses: 'github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866' + uses: 'github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4' with: sarif_file: './results.sarif'