4141
4242 steps :
4343 - name : Harden Runner
44- uses : step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
44+ uses : step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
4545 with :
4646 disable-sudo : true
4747 egress-policy : block
@@ -52,11 +52,11 @@ jobs:
5252 *.githubusercontent.com:443
5353
5454 - name : Checkout repository
55- uses : actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
55+ uses : actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5656
5757 # Initializes the CodeQL tools for scanning.
5858 - name : Initialize CodeQL
59- uses : github/codeql-action/init@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
59+ uses : github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
6060 with :
6161 languages : ${{ matrix.language }}
6262 # If you wish to specify custom queries, you can do so here or in a config file.
6969 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
7070 # If this step fails, then you should remove it and run the build manually (see below)
7171 - name : Autobuild
72- uses : github/codeql-action/autobuild@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
72+ uses : github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
7373
7474 # ℹ️ Command-line programs to run using the OS shell.
7575 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
8282 # ./location_of_script_within_repo/buildscript.sh
8383
8484 - name : Perform CodeQL Analysis
85- uses : github/codeql-action/analyze@c7f9125735019aa87cfc361530512d50ea439c71 # v3.25.1
85+ uses : github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
8686 with :
8787 category : " /language:${{matrix.language}}"
0 commit comments