diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6ae226ebef9b038f0b530646f8e53f482d8e0016..9ed0216449c1848f15d5d0a2611938ec7e7089f0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -66,7 +66,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea + uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -94,6 +94,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea + uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 7de373748767743dae1d937d99bd8f338069be54..cdafe07f67a24b1c8842c2d37d9778f235144594 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -69,6 +69,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea + uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b with: sarif_file: results.sarif