diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index da3a32b1..0046ecc8 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -31,12 +31,12 @@ jobs: uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab - name: Initialize CodeQL - uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f + uses: github/codeql-action/init@83f0fe6c4988d98a455712a27f0255212bba9bd4 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f + uses: github/codeql-action/autobuild@83f0fe6c4988d98a455712a27f0255212bba9bd4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f + uses: github/codeql-action/analyze@83f0fe6c4988d98a455712a27f0255212bba9bd4 diff --git a/.github/workflows/snyk-schedule.yml b/.github/workflows/snyk-schedule.yml index c802d90f..438acf36 100644 --- a/.github/workflows/snyk-schedule.yml +++ b/.github/workflows/snyk-schedule.yml @@ -51,6 +51,6 @@ jobs: run: snyk test --project-name=vermin --package-manager=pip --file=misc/.${{matrix.requirements}}-requirements.txt --command=python3 --sarif-file-output=snyk-${{matrix.requirements}}.sarif --show-vulnerable-paths=all --print-deps - name: Upload result to GitHub Code Scanning - uses: github/codeql-action/upload-sarif@29b1f65c5e92e24fe6b6647da1eaabe529cec70f + uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4 with: sarif_file: snyk-${{matrix.requirements}}.sarif