diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b1086f65e..b2305a5d9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -32,7 +32,7 @@ jobs: - name: Checkout repository uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Initialize CodeQL - uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 + uses: github/codeql-action/init@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7 with: languages: ${{ matrix.language }} - name: 'Install' @@ -49,6 +49,6 @@ jobs: - name: 'Build' run: cmake --build 'build' --verbose --parallel 4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 + uses: github/codeql-action/analyze@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/openssf_scorecard.yml b/.github/workflows/openssf_scorecard.yml index 97e5580f4..759408773 100644 --- a/.github/workflows/openssf_scorecard.yml +++ b/.github/workflows/openssf_scorecard.yml @@ -36,6 +36,6 @@ jobs: path: results.sarif retention-days: 5 - name: 'Upload Results' - uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 + uses: github/codeql-action/upload-sarif@8214744c546c1e5c8f03dde8fab3a7353211988d # v3.26.7 with: sarif_file: results.sarif