From 355e494c000e02e62dfe53aeaed8cd9f2f99ac02 Mon Sep 17 00:00:00 2001 From: Oksana Salyk Date: Tue, 10 Sep 2024 12:28:06 +0200 Subject: [PATCH] common: github/codeql-action --- .github/workflows/scan_codeql.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/scan_codeql.yml b/.github/workflows/scan_codeql.yml index 3c188209aa..85d10c8791 100644 --- a/.github/workflows/scan_codeql.yml +++ b/.github/workflows/scan_codeql.yml @@ -36,7 +36,7 @@ jobs: && sudo ./utils/docker/images/install-valgrind.sh - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 with: languages: cpp, python @@ -44,4 +44,4 @@ jobs: run: make test -j$(nproc) - name: CodeQL scan - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 4dd08a6dc5..feeb94164c 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -69,6 +69,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6 with: sarif_file: results.sarif