Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
  • Loading branch information
2 people authored and ymc9 committed Feb 21, 2024
1 parent 0a83a6e commit d296e5f
Show file tree
Hide file tree
Showing 5 changed files with 5 additions and 3 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ jobs:

# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2.22.12
uses: github/codeql-action/[email protected]
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/security-defender-for-devops.yml
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,7 @@ jobs:
6.0.x
- name: Run Microsoft Security DevOps
uses: microsoft/security-devops-action@e94440350ed10e2806d47cd0d7504a2c51abdbe9 # v1.6.0
uses: microsoft/[email protected]
id: msdo

- name: Upload results to Security tab
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/security-dependency-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,4 +31,5 @@ jobs:
token: ${{ secrets.BOT_TOKEN || github.token }} # Bot Token is a PAT for a automation account.

- name: 'Dependency Review'
+ uses: actions/[email protected]
uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1
2 changes: 1 addition & 1 deletion .github/workflows/security-ossar.yml
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ jobs:
# Run open source static analysis tools
- name: Run OSSAR
uses: github/ossar-action@786a16a90ba92b4ae6228fe7382fb16ef5c51000 # v1
uses: github/ossar-action@v1
id: ossar

# Upload results to the Security tab
Expand Down
1 change: 1 addition & 0 deletions .github/workflows/security-scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -57,6 +57,7 @@ jobs:
token: ${{ secrets.BOT_TOKEN || github.token }} # Bot Token is a PAT for a automation account.

- name: "Run analysis"
+ uses: ossf/[email protected]
uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
with:
results_file: results.sarif
Expand Down

0 comments on commit d296e5f

Please sign in to comment.